Salon booking system

Missing Authorization to Unauthenticated AJAX Actions Execution vulnerability <= 10.20

Admin+ Stored XSS vulnerability < 10.9.4

CSRF to Arbitrary Content Deletion vulnerability <= 10.16

Broken Access Control + CSRF vulnerability <= 10.22

Privilege Escalation vulnerability < 10.15