CVE-2026-110033: Salon Booking System 0 to before 10.31.11

Affected technology

Salon Booking System · 0 to before 10.31.11
Vendor not specified by the source

Description’s affected range: before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 18-Oct-2026 08:28 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 08:28:52.321542+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110033.html