← CVE Intelligence

CVE-2022-0920

Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure PUBLISHED

Description (CNA)

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data

Affected (CNA)

Vendor / productVersions
Unknown / Salon booking systemaffected 7.6.3 before 7.6.3
Unknown / Salon Booking System Proaffected 7.6.3 before 7.6.3

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.