CVE-2026-110034 — Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code

CVE-2026-110034

Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code PUBLISHED

Description (CNA)

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.

Affected (CNA)

Vendor / product	Versions
Unknown / Salon Booking System	affected 0 before 10.31.11

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e3a64d4d-92db-4dbc-a0b5-58bca4d8b5c4/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.