PT-2025-49879 · Unknown · Dimitri Grassi Salon Booking System

Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-66531

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dimitri Grassi Salon booking system versions through 10.30.3

Description The Salon booking system is susceptible to a Cross-Site Request Forgery (CSRF) issue. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge.

Recommendations Versions prior to and including 10.30.3 should be updated.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-66531

Affected Products

Dimitri Grassi Salon Booking System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66531 · Security Note
• https://twitter.com/CVEnew/status/2000617590138249326 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-30-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-30-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note