Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 88
Reset filtersSalon booking system <= 10.30.3 - Cross-Site Request Forgery
Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter
Course Booking System <= 6.1.5 - Missing Authorization to Unauthenticated Booking Data Export
Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution
Booking System Trafft <= 1.0.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Salon booking system <= 10.16 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion
Car Park Booking System for WordPress <= 2.6 - Missing Authorization
Course Booking System <= 6.1.2 - Reflected Cross-Site Scripting
TuriTop Booking System <= 1.0.11 - Authenticated (Subscriber+) PHP Object Injection
Salon booking system <= 10.29.6 - Missing Authorization
Course Booking System <= 6.1 - Missing Authorization
TuriTop Booking System <= 1.0.17 - Missing Authorization
Salon booking system <= 10.11 - Authenticated Privilege Escalation
Turisbook Booking System <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Booking System Trafft <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
Pinpoint Booking System <= 2.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
EzyOnlineBookings Online Booking System Widget <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Booking System <= 2.0.19.10 - Missing Authorization via wpbs_refresh_calendar_editor
Pinpoint Booking System <= 2.9.9.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.