CVE-2023-30748

MEDIO 6.1CVE-2023-30748 · Published 09/12/2024 · updated 17/06/2026

En resumen

CVE-2023-30748 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a easy appointments (easy-appointments).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.35%, mayor que el 28.9% de las vulnerabilidades.
Solución: actualizar a 3.11.1 o posterior.

Package	Affected versions	Patched versions
easy appointments easy-appointments	`< 3.11.1`	`3.11.1`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.

References

patchstack.com/database/wordpress/plugin/easy-appointments/vulnerability/wordpress-easy-appointments-plugin-3-10-7-auth-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory

Más vulnerabilidades de easy appointments

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

easy appointments

easy-appointments

< 3.11.1

3.11.1

Más vulnerabilidades de easy appointments

Ver todo →