Dimitri Grassi Salon Booking System Sensitive Data Exposure Vulnerability

A vulnerability allowing the unauthorized retrieval of embedded sensitive data has been identified in the Dimitri Grassi Salon booking system plugin for WordPress, affecting versions through 10.30.3. This issue arises from an exposure of sensitive system information, which could potentially be exploited to access information not typically available to regular users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which might be used to exploit other weaknesses within the system.

Remediation

Users of the WordPress Salon Booking System plugin should update to version 10.30.4 or later. Patchstack users can enable auto-update for vulnerable plugins.