673 matches found
Easy!Appointments SQL injection vulnerability
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
Easy!Appointments SQL injection vulnerability
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
PT-2025-34688 · Unknown · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy!Appointments version 1.5.1 Description: Easy!Appointments version 1.5.1 contains a SQL injection issue via the order by parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Easy!Appointments 安全漏洞
Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, an individual developer. A security vulnerability exists in Easy!Appointments version 1.5.1, which stems from an SQL injection in the orderby parameter...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
CVE-2025-50383
CVE-2025-50383 affects Easy!Appointments, specifically version 1.5.1, where a SQL injection vulnerability exists in the order_by parameter. The issue is confirmed by multiple sources in the connected documents, including CVE records and advisories. The CVSS v3.1 base score is 8.1 (HIGH), with net...
MAL-2025-23244 Malicious code in instacarro-sellers-appointments-api (npm)
The package instacarro-sellers-appointments-api was found to contain malicious code...
WordPress Simply Schedule Appointments plugin <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Shortcodes vulnerability discovered by muhammad yudha in WordPress Plugin Simply Schedule Appointments versions = 1.6.8.30...
CVE-2025-4667
CVE-2025-4667 : The Appointment Booking Calendar — Simply Schedule Appointments WordPress plugin is vulnerable to stored cross-site scripting via the ssa_admin_upcoming_appointments, ssa_admin_upcoming_appointments, and ssa_past_appointments shortcodes in all versions up to 1.6.8.30. The root cau...
WordPress plugin Simply Schedule Appointments 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
CVE-2025-22748
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Setmore SetMore Theme – Custom Post Types service-provider-profile-cpt allows Stored XSS.This issue affects SetMore Theme – Custom Post Types: from n/a through = 1.1...
CVE-2024-7129
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins...
CVE-2024-7876
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Appointment Type settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml...
CVE-2024-2842
The Easy Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eafullcalendar' shortcode in all versions up to, and including, 3.11.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-7877
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Notification settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is...