Advisories · Technology
Dimitri Grassi Salon booking system.
Every CVE that names Dimitri Grassi Salon booking system among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability
- Dimitri Grassi Salon booking system
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability
- Dimitri Grassi Salon booking system
- Privilege escalation
- CVSS 6.5 Medium
WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
- Dimitri Grassi Salon booking system
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
- Dimitri Grassi Salon booking system
- Authentication bypass
- CVSS 7.3 High
WordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability
- Dimitri Grassi Salon booking system
- Broken access control
- CVSS 7.5 High
WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability
- Dimitri Grassi Salon booking system
- Broken access control
- CVSS 6.5 Medium
WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability
- Dimitri Grassi Salon booking system
- Information disclosure
- CVSS 4.3 Medium
WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability
- Dimitri Grassi Salon booking system
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability
- Dimitri Grassi Salon booking system
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
- Dimitri Grassi Salon booking system
- Broken access control
- CVSS 7.2 High
WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability
- Dimitri Grassi Salon booking system
- Privilege escalation
- CVSS 4.3 Medium
WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability
- Dimitri Grassi Salon booking system
- Broken access control