Lucene search
K

518 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-36755

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00379EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-16488

Malicious code in bioql PyPI...

6.4CVSS7.2AI score0.00408EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-55584

Malicious code in bioql PyPI...

7.6CVSS7.6AI score0.0053EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/09 5:25 p.m.4 views

WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability

Content Injection vulnerability discovered by NAJIB Sinjari in WordPress Plugin Easy Appointments versions = 3.12.14...

6.1CVSS7.2AI score0.00209EPSS
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2025/08/26 12:31 a.m.5 views

Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS7.7AI score0.00353EPSS
Exploits2References6Affected Software1
OSV
OSV
added 2025/08/26 12:31 a.m.2 views

GHSA-2F28-69J7-85HF Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

7.1CVSS8.5AI score0.00353EPSS
Exploits2References6
GitLab Advisory Database
GitLab Advisory Database
added 2025/08/26 12:0 a.m.7 views

Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS8.5AI score0.00353EPSS
Exploits2References7Affected Software1
OSV
OSV
added 2025/08/25 6:15 p.m.3 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS5.9AI score0.00353EPSS
Exploits2References3
NVD
NVD
added 2025/08/25 6:15 p.m.4 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS0.00353EPSS
Exploits2References3
CVE
CVE
added 2025/08/25 12:0 a.m.52 views

CVE-2025-50383

CVE-2025-50383 affects Easy!Appointments, specifically version 1.5.1, where a SQL injection vulnerability exists in the order_by parameter. The issue is confirmed by multiple sources in the connected documents, including CVE records and advisories. The CVSS v3.1 base score is 8.1 (HIGH), with net...

8.1CVSS8.5AI score0.00353EPSS
Exploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/25 12:0 a.m.1 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8AI score0.00353EPSS
Exploits2References3
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.2 views

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, an individual developer. A security vulnerability exists in Easy!Appointments version 1.5.1, which stems from an SQL injection in the orderby parameter...

8.1CVSS7.6AI score0.00353EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.5 views

PT-2025-34688 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy!Appointments version 1.5.1 Description: Easy!Appointments version 1.5.1 contains a SQL injection issue via the order by parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

7.1CVSS7.1AI score0.00353EPSS
Exploits2References10
Cvelist
Cvelist
added 2025/08/25 12:0 a.m.7 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

0.00353EPSS
Exploits2References3
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-23244 Malicious code in instacarro-sellers-appointments-api (npm)

The package instacarro-sellers-appointments-api was found to contain malicious code...

7.2AI score
Exploits0
Patchstack
Patchstack
added 2025/06/17 11:4 a.m.6 views

WordPress Simply Schedule Appointments plugin <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Shortcodes vulnerability discovered by muhammad yudha in WordPress Plugin Simply Schedule Appointments versions = 1.6.8.30...

6.4CVSS5.6AI score0.00234EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2025/06/14 9:23 a.m.40 views

CVE-2025-4667

CVE-2025-4667 : The Appointment Booking Calendar — Simply Schedule Appointments WordPress plugin is vulnerable to stored cross-site scripting via the ssa_admin_upcoming_appointments, ssa_admin_upcoming_appointments, and ssa_past_appointments shortcodes in all versions up to 1.6.8.30. The root cau...

6.4CVSS5.7AI score0.00234EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/06/14 12:0 a.m.1 views

WordPress plugin Simply Schedule Appointments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.4CVSS5.8AI score0.00234EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 11:58 a.m.3 views

CVE-2025-22748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Setmore SetMore Theme – Custom Post Types service-provider-profile-cpt allows Stored XSS.This issue affects SetMore Theme – Custom Post Types: from n/a through = 1.1...

6.5CVSS7.2AI score0.00269EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:52 a.m.4 views

CVE-2024-7129

The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins...

7.2CVSS7.3AI score0.01106EPSS
Exploits1References1
Rows per page
Query Builder