CVE-2026-110031: Salon Booking System 10.17 to before 10.31.11

Affected technology

Salon Booking System · 10.17 to before 10.31.11
Vendor not specified by the source

Description’s affected range: before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 18-Oct-2026 08:28 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 08:28:52.321542+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110031.html