CVE-2026-17021
N/A
N/A
Summary
The Salon Booking System WordPress plugin through 10.30.33 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking, allowing unauthenticated users to tamper with the stored total of arbitrary bookings.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Salon Booking System | 0 <= 10.30.33 | affected |
Weaknesses
- CWE-862 Missing Authorization
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.