Medium · 6.1 CVE-2022-43487 EUVD-2022-46486GHSA-v7x7-wh72-mxcc

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbi…

Published Dec 5, 2022 · Updated Apr 24, 2025 · Assigned by jpcert

Vendor: Salon Booking System Product: Salon booking system

Description

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
Salon Booking System	Salon booking system	versions prior to 7.9	—

References

https://wordpress.org/plugins/salon-booking-system/
https://www.salonbookingsystem.com/
https://jvn.jp/en/jp/JVN59663854/index.html