Critical · 10.0 CVE-2024-30510 EUVD-2024-28430GHSA-3vxf-c798-m86j

WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability

Published Mar 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Salon Booking System Product: Salon booking system

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 9.5.

Affected products

Vendor	Product	Affected	Fixed
Salon Booking System	Salon booking system	≤ 9.5	—

References

https://patchstack.com/database/vulnerability/salon-booking-system/wordpress-salon-booking-system-plugin-9-5-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry