CVE-2021-24429 Salon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Unauthenticated stored XSS in Salon Booking System allows attackers to inject scripts executed in admin context, potentially leading to account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-24429?
CVE-2021-24429 is a medium-severity cross-site scripting vulnerability in Salon booking system, published on 12 Jul 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an appointment, allowing low privilege users such as subscriber to set JavaScript in them, leading to a Stored Cross-Site Scripting (XSS) vulnerability. The Payload will then be triggered when an admin visits the "Calendar" page and the malicious script is executed in the admin context.
Weakness: CWE-79
Which versions are affected by CVE-2021-24429?
It affects 1 product.
Products include Salonbookingsystem Salon Booking System.
How do I fix CVE-2021-24429?
No fix has been published for CVE-2021-24429 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2021-24429 being exploited?
There is no known exploitation of CVE-2021-24429 in the wild and no public exploit code.
Other vulnerabilities in Salon booking system
- CVE-2024-30510 WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability
- CVE-2024-3229 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload
- CVE-2024-4442 Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
- CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability
- CVE-2024-39658 WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability
Sources
Also known as GHSA-9pm7-cw8h-4w28.