Andy Urlep

The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.

**Name of the Vulnerable Software and Affected Versions** Gallery PhotoBlocks versions prior to 1.3.6 **Description** Insufficient sanitization and escaping of a gallery setting before it is output into an HTML attribute allows users with Contributor-level access and above to perform a Stored Cross-Site Scripting (XSS) attack. This enables the storage of malicious JavaScript that executes in the browser of any user viewing a page containing the gallery, including those with administrator privileges. **Recommendations** Update Gallery PhotoBlocks to version 1.3.6 or later.

**Name of the Vulnerable Software and Affected Versions** WordPress File Upload versions prior to 5.1.11 **Description** An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database. **Recommendations** Update to a version newer than 5.1.10.