Lucene search
+L

11 matches found

Cvelist
Cvelist
•added 2026/10/02 1:29 p.m.•6 views

CVE-2026-93875 JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

7.2CVSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/02 1:29 p.m.•5 views

EUVD-2026-91634

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

7.2CVSS6.1AI score
SaveExploits0References2
NVD
NVD
•added 2026/08/18 3:17 p.m.•10 views

CVE-2026-73365

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/18 2:00 p.m.•11 views

CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/18 2:00 p.m.•15 views

EUVD-2026-60787

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/18 2:00 p.m.•42 views

CVE-2026-73365

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/18 2:00 p.m.•35 views

CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/18 2:00 p.m.•38 views

CVE-2026-73365

The JetAppointment WordPress plugin (versions 2.5.2 and earlier) contains an unauthenticated SQL injection, exploitable over the network with no credentials, allowing attackers to read sensitive database data; CVSS 9.3 critical. Patchstack's advisory link is provided for details. Exploitation det...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/18 12:53 p.m.•13 views

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin JetAppointment versions = 2.5.2...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•25 views

PT-2026-77101

Name of the Vulnerable Software and Affected Versions JetAppointment versions prior to 2.5.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its databas...

9.3CVSS6AI score0.004EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•3 views

CVE-2026-73365: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
Rows per page
Query Builder