Easy!Appointments SQL injection vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-50383 · ADVISORY
• alextselegidis/easyappointments commit 0f0d71c · WEB
• easyappointments.org · WEB
• Abdullah4eb/CVE-2025-50383 · WEB
• alextselegidis/easyappointments · PACKAGE
• alextselegidis/easyappointments release 1.5.2-beta.1 · WEB
• easyappointments.org · Product

Autres vulnérabilités de alextselegidis/easyappointments

• CVE-2026-55651ÉLEVÉE 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841FAIBLE 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840FAIBLE 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839FAIBLE 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838FAIBLE 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…