Vulnerabilidades de Dimitri Grassi
CVEs publicadas que afetam produtos de Dimitri Grassi: 6 registro(s), com severidade, exploração e correções.
CVE-2026-94668
Alta · 7.1
CWE-79 09/10/2026
WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.
CVE-2026-105070
Alta · 8.8
CWE-266 06/10/2026
WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
CVE-2026-40768
Alta · 7.3
CWE-639 17/06/2026
WordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
CVE-2026-42666
Alta · 7.5
CWE-862 15/06/2026
WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.
CVE-2025-67954
Média · 6.5
CWE-497 22/01/2026
WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3.
CVE-2025-66531
Média · 4.3
CWE-352 09/12/2025
WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.