CVE-2024-57601

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legalsettings parameter...

Cross-site Scripting (XSS)

Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the legalsettings parameter. Details Cross-site scripting or XSS is a code...

PT-2025-6750

Name of the Vulnerable Software and Affected Versions Alex Tselegidis EasyAppointments version 1.5.0 Description The issue allows a remote attacker to execute arbitrary code via the legal settings parameter. This enables the attacker to perform actions such as injecting malicious scripts,...

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, a personal developer. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from the unfiltered legalsettings parameter, making it susceptible to cross-site scripting attacks...

CVE-2024-57601

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legalsettings parameter...

PT-2020-8002

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.0.0 Description: The issue allows for XSS attacks via a Legal or Support setting. This can be exploited to execute malicious scripts. Recommendations: For versions prior to 3.0.0, update to version 3.0.0 ...