CVE-2023-3427
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 8.4.6. This is due to missing or incorrect nonce validation on the 'save_customer' function, allowing unauthenticated attackers to change the admin role to customer or modify user meta via a forged request.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access and modify user roles, potentially leading to serious security breaches within the system.
Recommendation
It is recommended to update the Salon Booking System plugin to the latest version to mitigate this vulnerability and implement additional security measures such as monitoring administrator actions.
Original NVD description (English source)
The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.6. This is due to missing or incorrect nonce validation on the 'save_customer' function. This makes it possible for unauthenticated attackers to change the admin role to customer or change the user meta to arbitrary values via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.