title: Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure
description: The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data
problem types: CWE-863 Incorrect Authorization
affected:
{
product: Salon booking system
vendor: Unknown
versions:
lessThan: 7.6.3, status: affected, version: 7.6.3, versionType: custom
}
{
product: Salon Booking System Pro
vendor: Unknown
versions:
lessThan: 7.6.3, status: affected, version: 7.6.3, versionType: custom
}
