CVE-2026-109232

CVE-2026-109232 published: The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[<checkout-field-key>]' parameter in all versions up to, and including, 10.31.9 due to insufficient i...

View full NVD advisory → ← Back to CVE watch