Medium
CVE-2024-4468
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 40
Reset filters
Critical
CVE-2024-4442
Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-2429
Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-2439
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-2603
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
Critical
CVE-2024-30510
Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-2101
Salon booking system <= 9.6.2 - Authenticated (Customer+) Stored Cross-Site Scripting
High
CVE-2024-2102
Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix'
High
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-3427
Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer
Medium
CVE-2022-43487
Salon booking system <= 7.9 - Reflected Cross-Site Scripting
High
CVE-2022-0920
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Medium
CVE-2022-0919
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2021-24429
Salon booking system < 6.3.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.