CVE-2026-94668

Name of the Vulnerable Software and Affected Versions Salon booking system versions prior to 10.31.6

Description The salon-booking-system contains an issue involving improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting (XSS). Reflected XSS occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations Update the salon-booking-system to version 10.31.6 or later.