Easy!Appointments SQL injection vulnerability

ALTO 8.1CVE-2025-50383 · GHSA-2f28-69j7-85hf · Published 25/08/2025 · updated 05/07/2026

In breve

CVE-2025-50383 è una vulnerabilità ALTO (CVSS 8.1) che riguarda alextselegidis/easyappointments, easy!appointments (easyappointments).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.36%, superiore al 30.3% delle vulnerabilità.
Correzione: aggiornare a 1.5.2-beta.1 o successiva.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`< 1.5.2-beta.1`	`1.5.2-beta.1`
easy!appointments easyappointments	`= 1.5.1`	No fix yet

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

NVD description

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.5.2-beta.1

1.5.2-beta.1

= 1.5.1

No fix yet

Altre vulnerabilità di alextselegidis/easyappointments

Vedi tutto →