Lucene search
+L

277 matches found

NVD
NVD
added 2025/05/07 3:15 p.m.14 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.5CVSS0.00556EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/05/07 12:00 a.m.23 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

0.00556EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/07 12:00 a.m.82 views

CVE-2025-29448

CVE-2025-29448 affects Easy!Appointments v1.5.1. A booking logic flaw allows unauthenticated attackers to submit extremely long end_datetime values, enabling a denial of service by blocking all future booking availability. Technical details in connected docs show the impact as a DoS with availabi...

7.5CVSS6.5AI score0.00556EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/05/07 12:00 a.m.8 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.5CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.8 views

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment, scheduling management system from the individual developer Alex Tselegidis. A security vulnerability exists in Easy!Appointments version 1.5.1, which stems from a business logic issue that could lead to a denial of service...

7.5CVSS6.3AI score0.00556EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/05/07 12:00 a.m.5 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.4AI score0.00556EPSS
SaveExploits1References1
GitLab Advisory Database
GitLab Advisory Database
added 2025/05/07 12:00 a.m.20 views

Easy!Appointments Denial of Service (DoS)

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.5CVSS6.5AI score0.00556EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/03 4:45 p.m.11 views

CVE-2025-31828

Cross-Site Request Forgery CSRF vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through = 1.4.2...

8.8CVSS7.2AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.13 views

CVE-2025-31828

Cross-Site Request Forgery CSRF vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through = 1.4.2...

8.8CVSS0.00235EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 2:51 p.m.7 views

CVE-2025-31828 WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through = 1.4.2...

4.3CVSS7.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.7 views

CVE-2025-31828 WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in alextselegidis Easy!Appointments allows Cross Site Request Forgery. This issue affects Easy!Appointments: from n/a through 1.4.2...

4.3CVSS7.2AI score0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.24 views

CVE-2025-31828 WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through = 1.4.2...

4.3CVSS0.00235EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.75 views

CVE-2025-31828

CVE-2025-31828 is a CSRF vulnerability in Easy!Appointments affecting versions up to 1.4.2. The issue enables cross-site request forgery to change settings as described in the description. Public details in the initial document indicate a high-severity impact (CVSS v3.1 base 8.8) with network att...

8.8CVSS7.2AI score0.00235EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.10 views

WordPress plugin Easy!Appointments 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

8.8CVSS6AI score0.00235EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/13 12:33 a.m.14 views

GHSA-8FC2-FHH6-F6M5 Easy!Appointments Improper Restriction of Excessive Authentication Attempts

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

9.8CVSS9.4AI score0.00815EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.8 views

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, a personal developer. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from the unfiltered legalsettings parameter, making it susceptible to cross-site scripting attacks...

6.1CVSS5.8AI score0.00516EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.15 views

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment, scheduling management system from the individual developer Alex Tselegidis. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from a missing permission validation in index.php, resulting in elevated privileges...

9.8CVSS6.4AI score0.00815EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/09 1:15 p.m.32 views

CVE-2023-30748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7...

6.1CVSS0.00341EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.6 views

CVE-2023-30748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7...

6.1CVSS5.8AI score0.00341EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.13 views

CVE-2023-30748 WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7...

4.3CVSS6.7AI score0.00341EPSS
SaveExploits0References1
Rows per page
Query Builder