CVE-2024-39658: WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39658?
CVE-2024-39658 is classified as an SQL Injection vulnerability, which can lead to significant data exposure and manipulation.
How do I fix CVE-2024-39658?
To fix CVE-2024-39658, upgrade the Salon Booking System to version 10.8 or later.
What systems are affected by CVE-2024-39658?
CVE-2024-39658 affects the Salon Booking System WordPress Plugin versions up to and including 10.7.
Can CVE-2024-39658 lead to data breaches?
Yes, due to its nature as an SQL Injection vulnerability, CVE-2024-39658 can potentially lead to unauthorized access to sensitive data.
Is CVE-2024-39658 easy to exploit?
Yes, CVE-2024-39658 can be relatively easy to exploit without proper input validation and sanitization.