Easy!Appointments SQL injection vulnerability

ALTO 8.1CVE-2025-50383 · GHSA-2f28-69j7-85hf · Published 25/08/2025 · updated 05/07/2026

En resumen

CVE-2025-50383 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a alextselegidis/easyappointments, easy!appointments (easyappointments).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.36%, mayor que el 30.3% de las vulnerabilidades.
Solución: actualizar a 1.5.2-beta.1 o posterior.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`< 1.5.2-beta.1`	`1.5.2-beta.1`
easy!appointments easyappointments	`= 1.5.1`	No fix yet

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

NVD description

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.5.2-beta.1

1.5.2-beta.1

= 1.5.1

No fix yet

Más vulnerabilidades de alextselegidis/easyappointments

Ver todo →