Code Injection in alextselegidis/easyappointments

LOW 3.8CVE-2023-1367 · GHSA-9qvw-fhj2-xqmv · Published 13/03/2023 · updated 17/06/2026

In short

CVE-2023-1367 is a LOW (CVSS 3.8) vulnerability affecting alextselegidis/easyappointments, easyappointments (easyappointments).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.3% of all vulnerabilities.
Fix: update to 1.5.0 or later.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`< 1.5.0`	`1.5.0`
easyappointments easyappointments	`< 1.5.0`	`1.5.0`

Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0 due to unescaped output.

NVD description

Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.5.0

1.5.0

< 1.5.0

1.5.0

More vulnerabilities in alextselegidis/easyappointments

See all →