CVE-2026-52840

Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, "Caldav::connecttoserver" at "application/controllers/Caldav.php:60" hands the request's "caldavurl" to a Guzzle "REPORT" call without scheme or host validation. A logged-in backend user admin, provider, or...