alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-2102 · ADVISORY
• alextselegidis/easyappointments commit bddc5cb · WEB
• alextselegidis/easyappointments · PACKAGE
• huntr.dev/bounties/dd7c04a7-a984-4387-9ac4-24596e7ece44 · WEB

alextselegidis/easyappointments のその他の脆弱性

• CVE-2026-55651高 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841低 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840低 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839低 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838低 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…