alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-2102 · ADVISORY
• alextselegidis/easyappointments commit bddc5cb · WEB
• alextselegidis/easyappointments · PACKAGE
• huntr.dev/bounties/dd7c04a7-a984-4387-9ac4-24596e7ece44 · WEB

Lỗ hổng khác của alextselegidis/easyappointments

• CVE-2026-55651CAO 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841THẤP 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840THẤP 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839THẤP 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838THẤP 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…