Skip to contentUnknown Salon Booking System vulnerabilities
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount CodeCVE-2026-1100343.7 Low
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST RouteCVE-2026-1100354.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'CVE-2026-1100336.8 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer EditorCVE-2026-1100325.5 Medium
- dimitri grassi salon booking systemSalon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta KeyCVE-2026-1100317.2 High
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Administrator Account Creation via CSRFCVE-2026-1100158.8 High
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and StatusCVE-2026-1100145.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-TokenCVE-2026-1100134.8 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcomingCVE-2026-1100124.3 Medium
- dimitri grassi salon booking systemSalon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth CallbackCVE-2026-170234.8 Medium
- dimitri grassi salon booking systemSalon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking WizardCVE-2026-170227.5 High
- dimitri grassi salon booking systemSalon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total TamperingCVE-2026-170215.3 Medium
- dimitri grassi salon booking systemSalon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII DisclosureCVE-2026-170204.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.30.20 - Subscriber+ Booking Approval BypassCVE-2026-118874.3 Medium
- salonbookingsystem salon booking system, unknown salon booking system, appointment scheduling for salons, spas & small businesses +1 moreSalon Booking System < 10.9.4 - Admin+ Stored XSSCVE-2024-98824.8 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreSalon booking system <= 9.6.5 - Editor+ Stored XSS via Email SettingsCVE-2024-26036.3 Medium
- dimitri grassi salon booking systemSalon booking system <= 9.6.5 - Editor+ Stored XSSCVE-2024-24394.8 Medium
- dimitri grassi salon booking systemSalon booking system <= 9.6.5 - Settings Update via CSRFCVE-2024-24294.3 Medium
- dimitri grassi salon booking systemSalon booking system < 9.6.3 - Unauthenticated Stored XSSCVE-2024-21024.7 Medium
- dimitri grassi salon booking systemWordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)CVE-2024-21015.7 Medium
- dimitri grassi salon booking system, unknown salon booking system pro +1 moreSalon booking system < 7.6.3 - Customer+ Bookings/Customers Data DisclosureCVE-2022-09207.5 High
- dimitri grassi salon booking system, unknown salon booking system pro +1 moreSalon booking system < 7.6.3 - Unauthenticated Sensitive Data DisclosureCVE-2022-09195.3 Medium