PT-2024-30445 · Unknown · Salon Booking System

Le Ngoc Anh · CVE-2024-43280 · Published 2024-08-19 · Updated 2025-09-16

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Salon booking system versions through 10.8.1

Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in the Salon Booking System. This vulnerability allows redirection to untrusted sites.

Recommendations For versions through 10.8.1, update to a version that contains a fix for this issue, as no specific workaround or mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-43280

Affected Products

Salon Booking System

References · 7

• https://osv.dev/vulnerability/CVE-2024-43280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43280 · Security Note
• https://t.me/cvedetector/3540 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1825638900179620149 · Twitter Post
• https://twitter.com/dailycve/status/1967790341458980936 · Twitter Post
• https://patchstack.com/database/vulnerability/salon-booking-system/wordpress-salon-booking-system-plugin-10-8-1-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1825591354354737519 · Twitter Post