Remote code execution in alextselegidis/easyappointments

中危 6.1CVE-2024-57601 · GHSA-3wf7-83q3-948c · Published 12/02/2025 · updated 17/06/2026

要点

CVE-2024-57601 是影响 alextselegidis/easyappointments, easyappointments (easyappointments) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.52%，高于 44.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`≤ 1.5.0`	No fix yet
easyappointments easyappointments	`= 1.5.0`	No fix yet

Description

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

NVD description

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

References

nvd.nist.gov/vuln/detail/CVE-2024-57601 · ADVISORY
alextselegidis/easyappointments · PACKAGE
hkohi.ca/vulnerability/13 · WEB

alextselegidis/easyappointments 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

alextselegidis/easyappointments

Packagist

≤ 1.5.0

No fix yet

easyappointments

= 1.5.0

No fix yet

Description

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

NVD description

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

alextselegidis/easyappointments 的其他漏洞

查看全部 →