{"id":"CVE-2026-110034","title":"Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code","summary":"The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-20"],"product":"Salon Booking System","affected":["salon_booking_system < 10.31.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-19T09:26:24.427544Z"},"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T09:31:21.812Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110034","references":[{"url":"https://wpscan.com/vulnerability/e3a64d4d-92db-4dbc-a0b5-58bca4d8b5c4/"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T07:09:59.592Z","epss":0.00173,"epssPercentile":0.06393,"slug":"CVE-2026-110034","body":"## Overview\n\nThe Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.\n\n## Affected\n\n- `salon_booking_system < 10.31.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}