CVE-2026-105070

Dimitri Grassi Salon booking system

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

8.8 High · CVSS 3.1, patchstack.com

Description

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

References

patchstack.com/database/wordpress/plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-31-7-privilege-escalation-vulnerability?_s_id=cve