Skip to content

Known vulnerabilities in Dimitri Grassi Salon booking system

Is your version affected?

CVE Summary Score Published
CVE-2026-94668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi… 7.1 High Oct 9, 2026
CVE-2026-105070 Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions 8.8 High Oct 6, 2026
CVE-2026-81793 Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting… 6.5 Medium Sep 10, 2026
CVE-2026-66453 Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions 9.8 Critical Aug 13, 2026
CVE-2026-40768 Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions 7.3 High Jun 17, 2026
CVE-2026-42666 Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions 7.5 High Jun 15, 2026
CVE-2025-67954 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking… 6.5 Medium Jan 22, 2026
CVE-2025-66531 Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross… 4.3 Medium Dec 9, 2025
CVE-2025-47583 Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross… 5.4 Medium May 19, 2025
CVE-2025-32220 Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting… 5.4 Medium Apr 4, 2025
CVE-2025-31560 Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows… 7.2 High Apr 1, 2025
CVE-2024-47316 Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system… 4.3 Medium Oct 5, 2024