medium6.1
CVE-2022-43487
Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.
Impact
Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salonbookingsystem | Salon Booking System | before 7.9 |