CVE-2026-110014: Salon Booking System 0 to before 10.31.9

Affected technology

Salon Booking System · 0 to before 10.31.9
Vendor not specified by the source

Description’s affected range: before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.