Skip to contentAlextselegidis Easyappointments vulnerabilities
- alextselegidis easyappointmentsEasy!Appointments through 1.6.0 Authorization Bypass via booking/register EndpointCVE-2026-1087588.8 High
- alextselegidis easyappointmentsEasy!Appointments Vulnerable to Appointments Takeover via Excessive Data ExposureCVE-2026-556517.1 High
- alextselegidis easyappointmentsEasy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google syncCVE-2026-52841Fix available3.1 Low
- alextselegidis easyappointmentsEasy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal networkCVE-2026-52840Fix available2.7 Low
- alextselegidis easyappointmentsEasy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization BypassCVE-2026-52839Fix available3.3 Low
- alextselegidis easyappointmentsEasy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSSCVE-2026-52838Fix available2.6 Low
- alextselegidis easyappointmentsEasy!Appointments has unauthenticated customer PII disclosure on booking reschedule pageCVE-2026-528376.9 Medium
- alextselegidis easyappointments, easyappointments easy\!appointments +1 moreCSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeoverCVE-2026-236227.4 High
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0CVE-2023-380549.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0CVE-2023-380499.9 Critical
- easyappointmentsA BOLA vulnerability in POST /customers in EasyAppointments < 1.5.0CVE-2023-32905.0 Medium
- easyappointmentsA BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.0CVE-2023-32857.7 High
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreAuthorization Bypass Through User-Controlled Key in alextselegidis/easyappointmentsCVE-2023-3700Fix available6.3 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments, fossbilling +2 moreOpen Redirect in alextselegidis/easyappointmentsCVE-2023-35686.3 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreSession Fixation in alextselegidis/easyappointmentsCVE-2023-21055.4 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreImproper Access Control in alextselegidis/easyappointmentsCVE-2023-21045.4 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCross-site Scripting (XSS) - Stored in alextselegidis/easyappointmentsCVE-2023-21034.3 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCross-site Scripting (XSS) - Stored in alextselegidis/easyappointmentsCVE-2023-21026.8 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCode Injection in alextselegidis/easyappointmentsCVE-2023-1367Fix available6.0 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreUse of Hard-coded Credentials in alextselegidis/easyappointmentsCVE-2023-12696.5 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreAPI Privilege Escalation in alextselegidis/easyappointmentsCVE-2022-13978.8 High
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreExposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointmentsCVE-2022-0482Public exploitFix availableEPSS 43.7%9.1 Critical