The Salon Booking System plugin for WordPress has a security issue that allows malicious code to be added through the admin settings. This can be done by someone with high-level access, and it can cause harmful scripts to run when a user visits a certain page. This only affects certain types of WordPress installations.