CVE-2024-57601

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legalsettings parameter...

CVE-2024-57601

creationtimestamp| type| source ---|---|--- 2025-02-12 22:19:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7egjggc2a 2025-02-12 23:09:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4150 2025-02-13 00:25:59+00:00| seen| https://t.me/cvedetector/17941...

CVE-2024-57601

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legalsettings parameter...

CVE-2024-57601

The Alex Tselegidis EasyAppointments software (version 1.5.0) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper handling of the legal_settings parameter , which allows a remote attacker to inject and execute arbitrary malicious scripts in a user's browser. This ca...