CveMateVulnerability intelligence

Dimitri Grassi vulnerabilities

12 vulnerabilities

Known vulnerabilities in Dimitri Grassi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Salon Booking System12 vulnerabilities

CVE-2025-47583dimitri grassisalon booking system+11y ago19-05-2025 16:07

Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.16.CVE-2025-31560dimitri grassisalon booking system+21y ago01-04-2025 20:58

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through < 10.15.CVE-2025-66531dimitri grassisalon booking system+110mo ago09-12-2025 14:13

Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.CVE-2025-67954dimitri grassisalon booking system+19mo ago22-01-2026 16:51

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3.CVE-2025-32220dimitri grassisalon booking system+21y ago04-04-2025 15:59

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.CVE-2024-47316dimitri grassisalon booking system+22y ago05-10-2024 12:27

Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through <= 10.9.CVE-2026-105070dimitri grassisalon booking system+116d ago06-10-2026 08:35

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.CVE-2026-40768dimitri grassisalon booking system+14mo ago17-06-2026 09:51

Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.CVE-2026-42666dimitri grassisalon booking system+14mo ago15-06-2026 20:18

Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.CVE-2026-66453dimitri grassisalon booking system+12mo ago13-08-2026 13:36

Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.CVE-2026-94668dimitri grassisalon booking system+113d ago09-10-2026 10:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.CVE-2026-81793dimitri grassisalon booking system+11mo ago10-09-2026 14:23

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.