---
id: CVE-2026-110034
title: >-
  Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via
  Discount Code
summary: >-
  The Salon Booking System WordPress plugin before 10.31.11 does not enforce a
  minimum of zero when subtracting a fixed-amount discount from a booking's
  total, allowing an unauthenticated visitor who knows a valid discount code to
  create a…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-20
product: Salon Booking System
affected:
  - salon_booking_system < 10.31.11
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-19T09:26:24.427544Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T09:31:21.812Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110034'
references:
  - url: 'https://wpscan.com/vulnerability/e3a64d4d-92db-4dbc-a0b5-58bca4d8b5c4/'
tags:
  - cve.org
ingestedAt: '2026-10-19T07:09:59.592Z'
epss: 0.00173
epssPercentile: 0.06393
---

## Overview

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.

## Affected

- `salon_booking_system < 10.31.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.