CVE-2022-43487

MEDIUM
STIX 2.1 vulnerability

Record summary

CVE-2022-43487 has a selected CVSS score of 6.1 (medium).

Description

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 24, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Salon booking system

Browse Salon Booking System / Salon booking system
CVE Listversions prior to 7.9affected

References

4