Salonbookingsystem vulnerabilities
We track 4 vulnerabilities in Salonbookingsystem products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2024.
Latest Salonbookingsystem vulnerabilities
- 9.1 Critical severity
Salon booking system: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9.
- 9.8 Critical severity
Salon Booking System – Free Version: Unrestricted Upload of File with Dangerous Type
The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_ImportAssistants function along with missing authorization checks in all versions up to, and including, 10.2. This
- 9.1 Critical severity
Salon Booking System – Free Version: Improper Limitation of a Pathname to a Restricted Directory
The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for un
- 9.8 Critical severity
Salon booking system: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 9.5.