Easy-appointments

Easy Appointments

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-29448

  • EPSS 0.54%
  • Veröffentlicht 07.05.2025 00:00:00
  • Zuletzt bearbeitet 28.01.2026 17:45:01

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

6.1

CVE-2023-30748

  • EPSS 0.16%
  • Veröffentlicht 09.12.2024 13:15:28
  • Zuletzt bearbeitet 05.02.2025 20:26:23

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.

4.3

CVE-2024-2844

  • EPSS 0.09%
  • Veröffentlicht 29.03.2024 06:15:08
  • Zuletzt bearbeitet 05.02.2025 21:03:26

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18. This makes it possible for unau...

5.4

CVE-2024-2842

  • EPSS 0.17%
  • Veröffentlicht 29.03.2024 06:15:07
  • Zuletzt bearbeitet 05.02.2025 21:12:25

The Easy Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ea_full_calendar' shortcode in all versions up to, and including, 3.11.18 due to insufficient input sanitization and output escaping on user sup...

8.8

CVE-2022-36424

  • EPSS 0.06%
  • Veröffentlicht 17.07.2023 16:15:09
  • Zuletzt bearbeitet 06.02.2025 19:03:15

Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions.

5.4

CVE-2022-4668

Exploit
  • EPSS 0.2%
  • Veröffentlicht 23.01.2023 15:15:15
  • Zuletzt bearbeitet 02.04.2025 16:15:27

The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripti...

6.1

CVE-2017-15812

  • EPSS 0.2%
  • Veröffentlicht 23.10.2017 17:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel.