Easy!Appointments SQL injection vulnerability

ALTO 8.1CVE-2025-50383 · GHSA-2f28-69j7-85hf · Published 25/08/2025 · updated 05/07/2026

Em resumo

CVE-2025-50383 é uma vulnerabilidade ALTO (CVSS 8.1) que afeta alextselegidis/easyappointments, easy!appointments (easyappointments).
Chance de exploração nos próximos 30 dias (EPSS): 0.36%, maior que 30.3% das vulnerabilidades.
Correção: atualize para 1.5.2-beta.1 ou posterior.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`< 1.5.2-beta.1`	`1.5.2-beta.1`
easy!appointments easyappointments	`= 1.5.1`	No fix yet

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

NVD description

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.5.2-beta.1

1.5.2-beta.1

= 1.5.1

No fix yet

Mais vulnerabilidades de alextselegidis/easyappointments

Ver tudo →