CVE-2022-0920CWE-863

Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure

published April 11, 2022

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01454 · 73.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-04-11T14:40Z
EPSS history
Timeline
  • 11 APR 14:40Z
    Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure
    cvelistv5