Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/alextselegidis/easyappointments@1.5.0
purl pkg:composer/alextselegidis/easyappointments@1.5.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-3wf7-83q3-948c
Aliases:
CVE-2024-57601
Remote code execution in alextselegidis/easyappointments Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute … There are no reported fixed by versions.
GHSA-8fc2-fhh6-f6m5
Aliases:
CVE-2024-57602
Easy!Appointments Improper Restriction of Excessive Authentication Attempts An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-9qvw-fhj2-xqmv
Code Injection in alextselegidis/easyappointments Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0 due to unescaped output. CVE-2023-1367
GHSA-8c6q-26w6-qwhg
Easy!Appointments Improper Access Control vulnerability Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at … CVE-2023-3700