Sploitus

10 exploited vulnerabilities in Salon Booking System

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
10
Affected Salonbookingsystem Salon Booking System versions
< 7.6.3, 9.6.6, 6.3.1, 9.6.3

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2022-0920 1 exploit
CVSS 7.5 HIGH 2022-04-11FIX AVAILABLE
Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure
CVE-2024-2603 1 exploit
CVSS 6.3 MEDIUM 2024-04-26
Salon booking system < 9.6.6 - Editor+ Stored XSS via Email Settings
CVE-2021-24429 1 exploit
CVSS 6.1 MEDIUM 2021-07-12FIX AVAILABLE
Salon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
CVE-2024-2101 1 exploit
CVSS 5.7 MEDIUM 2024-04-16FIX AVAILABLE
Salon Booking System < 9.6.3 - Unauthenticated Stored XSS
CVE-2022-0919 1 exploit
CVSS 5.3 MEDIUM 2022-04-11FIX AVAILABLE
Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure
CVE-2024-9882
CVSS 4.8 MEDIUM 2025-05-15FIX AVAILABLE
CVE-2024-2439 1 exploit
CVSS 4.8 MEDIUM 2024-04-26
Salon booking system < 9.6.6 - Editor+ Stored XSS
CVE-2024-2102 1 exploit
CVSS 4.7 MEDIUM 2024-04-16FIX AVAILABLE
Salon booking system < 9.6.3 - Unauthenticated Stored XSS
CVE-2026-11887
CVSS 4.3 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2024-2429 1 exploit
CVSS 4.3 MEDIUM 2024-04-26
Salon booking system < 9.6.6 - Settings Update via CSRF