PatchTheCVEsalonbookingsystem vulnerabilities
Recent CVEs affecting salonbookingsystem products. 6 tracked.
salonbookingsystem has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-05-15. Highest priority: CVE-2025-31560 (score 37/100).
- CVE-2025-32220 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploit
- CVE-2025-31560 HIGH 7.2 UPGRADE Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allow
- CVE-2024-9882 MEDIUM 4.8 UPGRADE The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1
- CVE-2024-47316 MEDIUM 4.3 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-bo
- CVE-2024-43280 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system
- CVE-2024-39658 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Bo
FAQ
How do I fix salonbookingsystem vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is salonbookingsystem being exploited right now?
None of the tracked salonbookingsystem CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which salonbookingsystem CVE should I patch first?
CVE-2025-31560 currently ranks highest (37/100): Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allow.