salon booking system vulnerabilities and fixes

Recent CVEs affecting salon booking system, with upgrade or downgrade steps. 16 tracked.

Also searched as: salonbookingsystem.

salon booking system has 16 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 16. Most recent: 2025-05-15. Highest priority: CVE-2024-4442 (score 54/100).

• CVE-2025-32220 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploit
• CVE-2025-31560 HIGH 7.2 UPGRADE Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allow
• CVE-2024-9882 MEDIUM 4.8 UPGRADE The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1
• CVE-2024-4468 MEDIUM 4.3 UPGRADE The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data du
• CVE-2024-4442 CRITICAL 9.1 UPGRADE The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to,
• CVE-2024-47316 MEDIUM 4.3 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-bo
• CVE-2024-43280 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system
• CVE-2024-3229 CRITICAL 9.8 UPGRADE The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type
• CVE-2024-39658 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Bo
• CVE-2024-30510 CRITICAL 10.0 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.Thi
• CVE-2024-2603 MEDIUM 6.3 UPGRADE The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, whi
• CVE-2024-2439 MEDIUM 4.8 UPGRADE The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, whi
• CVE-2024-2429 MEDIUM 4.3 UPGRADE The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its se
• CVE-2024-2102 MEDIUM 4.7 UPGRADE The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone
• CVE-2024-2101 MEDIUM 5.7 UPGRADE The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone
• CVE-2023-48319 MEDIUM 6.8 UPGRADE Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Esca

FAQ

How do I fix salon booking system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is salon booking system being exploited right now?

None of the tracked salon booking system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which salon booking system CVE should I patch first?

CVE-2024-4442 currently ranks highest (54/100): The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, .

RSS feed for salon booking system · ← Back to latest CVEs