CVE-2022-0920

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data

Affected products

Salon Booking System Free, Salon Booking System

Salonbookingsystem Salon Booking System

< 7.6.3

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

1.5% (72th percentile)

Weakness

CWE-863

NVD status

Modified

Published

2022-04-11