What is GHSA-9wc6-98h9-ghvq?

GHSA-9wc6-98h9-ghvq is a security advisory published by GitHub Security Advisories with Low severity. The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when...

Which CVE IDs does GHSA-9wc6-98h9-ghvq cover?

GHSA-9wc6-98h9-ghvq covers the following CVE IDs: CVE-2026-110034. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9wc6-98h9-ghvq?

GHSA-9wc6-98h9-ghvq has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-9wc6-98h9-ghvqLowCVSS 3.7

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when...

Vendor

GitHub Security Advisories

Published

October 19, 2026

Last Modified

October 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-110034 →

📋 Description

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110034
https://wpscan.com/vulnerability/e3a64d4d-92db-4dbc-a0b5-58bca4d8b5c4
https://github.com/advisories/GHSA-9wc6-98h9-ghvq