The Salon booking system plugin for WordPress has a security issue where unauthorized users can inject harmful code into the website. This can happen if the plugin is not properly protecting against malicious code. This only affects certain types of WordPress installations.