Threats tagged 'ghsa-9jp6-8vxq-2865'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-17022Salon Booking System (WordPress plugin) · Information Exposure High7.5EPSS 0.4%2026-08-10CVE Database V5CVE-2026-17022 The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before loading it in its booking-wizard confirmation steps, allowing unauthenticated attackers to disclose other customers' booking records, including personal information, by supplying a sequential booking identifier. EPSS 0.4%Vulnerability CWE-200 #ghsa-9jp6-8vxq-2865	CVE Database V5	2026-08-10

Page 1 of 1