CVE-2022-43487

2022-12-0500:00:00

jpcert

www.cve.org

cve-2022-43487

cross-site scripting

salon booking system

remote unauthenticated attacker

arbitrary script

EPSS

0.002

Percentile

57.2%

JSON

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "Salon Booking System",
    "product": "Salon booking system",
    "versions": [
      {
        "version": "versions prior to 7.9",
        "status": "affected"
      }
    ]
  }
]