Dimitri Grassi Salon Booking System vulnerabilities
12 vulnerabilities
Known vulnerabilities in Dimitri Grassi Salon Booking System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-47583dimitri grassisalon booking system+1
EPSS score0.15%
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.16.CVE-2025-31560dimitri grassisalon booking system+2EPSS score0.56%
Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through < 10.15.CVE-2025-66531dimitri grassisalon booking system+1EPSS score0.16%
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.CVE-2025-67954dimitri grassisalon booking system+1EPSS score0.42%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3.CVE-2025-32220dimitri grassisalon booking system+2EPSS score0.52%
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.CVE-2024-47316dimitri grassisalon booking system+2EPSS score0.33%
Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through <= 10.9.CVE-2026-105070dimitri grassisalon booking system+1EPSS score0.29%
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.CVE-2026-40768dimitri grassisalon booking system+1EPSS score0.30%
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.CVE-2026-42666dimitri grassisalon booking system+1EPSS score0.39%
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.CVE-2026-66453dimitri grassisalon booking system+1EPSS score0.61%
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.CVE-2026-94668dimitri grassisalon booking system+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.CVE-2026-81793dimitri grassisalon booking system+1EPSS score0.33%
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.