CVE-2024-3229 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload

What is CVE-2024-3229?

CVE-2024-3229 is a critical vulnerability in wordpresschef Salon Booking System – Free Version, published on 19 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_ImportAssistants function along with missing authorization checks in all versions up to, and including, 10.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Weakness: CWE-434

Which versions are affected by CVE-2024-3229?

It affects 1 product.

Products include Salonbookingsystem Salon Booking System.

How do I fix CVE-2024-3229?

No fix has been published for CVE-2024-3229 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-3229 being exploited?

There is no known exploitation of CVE-2024-3229 in the wild and no public exploit code.

Other vulnerabilities in wordpresschef Salon Booking System – Free Version

• CVE-2024-30510 WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability Critical 10.0
• CVE-2024-4442 Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion Critical 9.1
• CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability High 8.6
• CVE-2024-39658 WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability High 7.6
• CVE-2022-0920 Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4vrr-r4j5-6m68.