Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network | Low Risk 2.7 | 3 months ago | 9 hours ago |
|
|
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS | Low Risk 2.6 | 3 months ago | 9 hours ago |
|
|
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync | Low Risk 3.1 | 3 months ago | 9 hours ago |
|
|
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page | Medium Risk 6.0 | 3 months ago | 3 months ago |
|
|
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure | High Risk 7.1 | 3 months ago | 3 months ago |
|
|
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass | Low Risk 3.3 | 3 months ago | 3 months ago |
|
|
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass | High Risk 8.0 | 9 months ago | 9 months ago |
|
|
Easy!Appointments SQL injection vulnerability | Medium Risk 6.0 | 1 year ago | 1 year ago |
|
|
Easy!Appointments Denial of Service (DoS) | Medium Risk 6.0 | 1 year ago | 1 year ago |
|
|
Remote code execution in alextselegidis/easyappointments | Medium Risk 6.1 | 1 year ago | 1 year ago |
|
|
Easy!Appointments Improper Restriction of Excessive Authentication Attempts | Critical 9.8 | 1 year ago | 1 year ago |
|
|
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments | Critical 9.1 | 4 years ago | 2 years ago |
|
|
Easy!Appointments Improper Access Control vulnerability | Medium Risk 6.3 | 3 years ago | 2 years ago |
|
|
alextselegidis/easyappointments Session Fixation vulnerability | Medium Risk 5.4 | 3 years ago | 3 years ago |
|
|
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting | Medium Risk 5.4 | 3 years ago | 3 years ago |
|
|
alextselegidis/easyappointments Improper Access Control vulnerability | Medium Risk 5.4 | 3 years ago | 3 years ago |
|
|
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting | Medium Risk 6.8 | 3 years ago | 3 years ago |
|
|
Code Injection in alextselegidis/easyappointments | High Risk 7.3 | 3 years ago | 3 years ago |
|
|
Easy!Appointments uses hard-coded credentials | Critical 9.8 | 3 years ago | 3 years ago |
|
|
Privilege escalation in easyappointments | High Risk 8.8 | 4 years ago | 3 years ago |
Page 1