High
CVE-2026-105070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 40
Reset filters
High
CVE-2026-94668
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-81793
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Missing Authorization
Medium
CVE-2026-11887
Salon Booking System <= 10.30.19 - Missing Authorization to Authenticated (Subscriber+) Booking Approval Bypass
Medium
CVE-2026-66453
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.30.26 - Missing Authorization
Medium
CVE-2026-17020
Salon Booking System – Free Version < 10.31.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure
Medium
CVE-2026-17021
Salon Booking System – Free Version <= 10.30.33 - Missing Authorization
Medium
CVE-2026-17022
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure
Medium
CVE-2026-17023
Salon Booking System – Free Version < 10.31.3 - Missing Authorization to Unauthenticated Google Calendar Connection Hijack
High
CVE-2026-15070
Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter
Medium
CVE-2026-42666
Salon Booking System – Free Version <= 10.30.25 - Missing Authorization
High
CVE-2026-6320
Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal
Medium
CVE-2026-40768
Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference
Low
CVE-2025-67954
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-66531
Salon booking system <= 10.30.3 - Cross-Site Request Forgery
Medium
CVE-2025-8492
Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution
Medium
CVE-2025-47583
Salon booking system <= 10.16 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion
Medium
CVE-2025-32220
Salon booking system <= 10.29.6 - Missing Authorization
High
CVE-2025-31560
Salon booking system <= 10.11 - Authenticated Privilege Escalation
Medium
CVE-2024-47316
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-9882
Salon Booking System <= 10.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-43280
Salon booking system <= 10.8.1 - Unauthenticated Open Redirect
Critical
CVE-2024-39658
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-3229
Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.