Dimitri Grassi Salon Booking System Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Dimitri Grassi Salon Booking System plugin for WordPress, affecting versions prior to 10.15. This vulnerability allows users with low privileges to escalate their rights and gain higher-level access, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and potentially full control over the WordPress site.

Remediation

Users of the Dimitri Grassi Salon Booking System plugin should update to version 10.15 or later. Patchstack users can enable auto-updates for vulnerable plugins.