| CVE-2026-94668 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi…
|
7.1
High
|
Oct 9, 2026 |
| CVE-2026-105070 |
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions
|
8.8
High
|
Oct 6, 2026 |
| CVE-2026-81793 |
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting…
|
6.5
Medium
|
Sep 10, 2026 |
| CVE-2026-66453 |
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions
|
9.8
Critical
|
Aug 13, 2026 |
| CVE-2026-40768 |
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions
|
7.3
High
|
Jun 17, 2026 |
| CVE-2026-42666 |
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions
|
7.5
High
|
Jun 15, 2026 |
| CVE-2025-67954 |
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking…
|
6.5
Medium
|
Jan 22, 2026 |
| CVE-2025-66531 |
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross…
|
4.3
Medium
|
Dec 9, 2025 |
| CVE-2025-47583 |
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross…
|
5.4
Medium
|
May 19, 2025 |
| CVE-2025-32220 |
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting…
|
5.4
Medium
|
Apr 4, 2025 |
| CVE-2025-31560 |
Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows…
|
7.2
High
|
Apr 1, 2025 |
| CVE-2024-47316 |
Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system…
|
4.3
Medium
|
Oct 5, 2024 |