Threats tagged 'ghsa-ghwh-7f33-pg44'

A reflected Cross-site Scripting (XSS) vulnerability exists in the Dimitri Grassi Salon booking system up to version 10.31.14. This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of a victim's browser. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and impacts confidentiality, integrity, and availability.