CVE-2024-39658: WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection

WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability

Status

Published

2024-08-29

Updated

2026-04-28

Assigning organization

Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Salon Booking System Salon booking system

Default version status: unaffected

n/a to ≤ 10.7affected

References

https://patchstack.com/database/vulnerability/salon-booking-system/wordpress-salon-booking-system-plugin-10-7-authenticated-sql-injection-vulnerability?_s_id=cve ↗