High · 7.6 CVE-2024-39658 EUVD-2024-38163GHSA-992c-4m5h-875p

WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Salon Booking System Product: Salon booking system

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.

Affected products

Vendor	Product	Affected	Fixed
Salon Booking System	Salon booking system	≤ 10.7	—

References

https://patchstack.com/database/vulnerability/salon-booking-system/wordpress-salon-booking-system-plugin-10-7-authenticated-sql-injection-vulnerability?_s_id=cve vdb-entry