Security
فارسی
All products

alextselegidis/easyappointments

Composer · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal networkCVE-2026-52840 · GHSA-PM5P-7W5H-JM5Q alextselegidis/easyappointments Composer Low Fix reported
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSSCVE-2026-52838 · GHSA-996F-334J-67G7 alextselegidis/easyappointments Composer Low Fix reported
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google syncCVE-2026-52841 · GHSA-8HM4-R66F-29WR alextselegidis/easyappointments Composer Low Fix reported
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule pageCVE-2026-52837 · GHSA-XGR6-PQJV-3PF8 alextselegidis/easyappointments Composer Medium No fix reported
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data ExposureCVE-2026-55651 · GHSA-4VMM-5QVC-W5P7 alextselegidis/easyappointments Composer High No fix reported
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization BypassCVE-2026-52839 · GHSA-W8XC-8G92-V77H alextselegidis/easyappointments Composer Low Fix reported
alextselegidis/easyappointments is Vulnerable to CSRF Protection BypassCVE-2026-23622 · GHSA-54V4-4685-VWRJ alextselegidis/easyappointments Composer High No fix reported
Easy!Appointments SQL injection vulnerabilityCVE-2025-50383 · GHSA-2F28-69J7-85HF alextselegidis/easyappointments Composer Medium Fix reported
Easy!Appointments Denial of Service (DoS)CVE-2025-29448 · GHSA-HCJV-982C-5F29 alextselegidis/easyappointments Composer Medium No fix reported
Remote code execution in alextselegidis/easyappointmentsCVE-2024-57601 · GHSA-3WF7-83Q3-948C alextselegidis/easyappointments Composer Medium No fix reported
Easy!Appointments Improper Restriction of Excessive Authentication Attempts CVE-2024-57602 · GHSA-8FC2-FHH6-F6M5 alextselegidis/easyappointments Composer Critical No fix reported
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointmentsCVE-2022-0482 · GHSA-R6CM-WG48-RH2R alextselegidis/easyappointments Composer Critical Fix reported
Easy!Appointments Improper Access Control vulnerabilityCVE-2023-3700 · GHSA-8C6Q-26W6-QWHG alextselegidis/easyappointments Composer Medium Fix reported
alextselegidis/easyappointments vulnerable to Stored Cross-site ScriptingCVE-2023-2103 · GHSA-7M8R-GMC3-3P4V alextselegidis/easyappointments Composer Medium No fix reported
alextselegidis/easyappointments Session Fixation vulnerabilityCVE-2023-2105 · GHSA-4QMM-CV4R-QFR4 alextselegidis/easyappointments Composer Medium No fix reported
alextselegidis/easyappointments Improper Access Control vulnerabilityCVE-2023-2104 · GHSA-FC4G-F42P-7RHP alextselegidis/easyappointments Composer Medium No fix reported
alextselegidis/easyappointments vulnerable to Stored Cross-site ScriptingCVE-2023-2102 · GHSA-J6QQ-9939-9JV8 alextselegidis/easyappointments Composer Medium No fix reported
Code Injection in alextselegidis/easyappointmentsCVE-2023-1367 · GHSA-9QVW-FHJ2-XQMV alextselegidis/easyappointments Composer High Fix reported
Easy!Appointments uses hard-coded credentialsCVE-2023-1269 · GHSA-347F-RXG8-QGRV alextselegidis/easyappointments Composer Critical No fix reported
Privilege escalation in easyappointmentsCVE-2022-1397 · GHSA-7F62-4887-CFV5 alextselegidis/easyappointments Composer High No fix reported