Unauthorized File Upload Vulnerability Affects Salon Booking System Plugin for WordPress

CVE-2024-3229

9.8CRITICAL

Key Information

Vendor: WordPresschef
Status: Salon Booking System
Vendor: CVE Published:; 19 June 2024

Summary

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_ImportAssistants function along with missing authorization checks in all versions up to, and including, 10.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected Version(s)

Salon Booking System <= 10.2

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 19, 2024
Disclosed
Jun 18, 2024
Vulnerability Reserved.
Apr 2, 2024

Collectors

NVD DatabaseMitre Database

Credit

Gibran Abdillah