The Dimitri Grassi Salon booking system is affected by a CSRF vulnerability identified as CVE-2025-47583. This vulnerability allows attackers to induce authenticated users to perform unintended actions without their consent. The affected versions include all versions up to 10.16. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction, with no confidentiality impact, limited integrity impact, and limited availability impact.

Successful exploitation of this CSRF vulnerability could result in unauthorized actions being performed on behalf of authenticated users, potentially leading to limited integrity and availability issues within the salon booking system. There is no impact on confidentiality. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor the vendor's communications for updates. Implementing standard CSRF protections such as anti-CSRF tokens and validating the origin of requests may help mitigate risk until an official fix is available.