Search for packages
| purl | pkg:composer/alextselegidis/easyappointments@1.5.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-54v4-4685-vwrj
Aliases: CVE-2026-23622 |
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass ### Summary `application/core/EA_Security.php::csrf_verify()` only enforces CSRF for POST requests and returns early for … | There are no reported fixed by versions. |
|
GHSA-996f-334j-67g7
Aliases: CVE-2026-52838 |
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS ## Summary Easy!Appointments allows administrators to define … | There are no reported fixed by versions. |
|
GHSA-8hm4-r66f-29wr
Aliases: CVE-2026-52841 |
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync ### Summary … | There are no reported fixed by versions. |
|
GHSA-w8xc-8g92-v77h
Aliases: CVE-2026-52839 |
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass ## Summary Easy!Appointments correctly filters provider-scoped appointments in the … | There are no reported fixed by versions. |
|
GHSA-xgr6-pqjv-3pf8
Aliases: CVE-2026-52837 |
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page ## Summary The booking reschedule view at `/index.php/booking/reschedule/{appointment_hash}` (handled by … | There are no reported fixed by versions. |
|
GHSA-pm5p-7w5h-jm5q
Aliases: CVE-2026-52840 |
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network ### Summary `Caldav::connect_to_server` at `application/controllers/Caldav.php:60` … | There are no reported fixed by versions. |
|
GHSA-4vmm-5qvc-w5p7
Aliases: CVE-2026-55651 |
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure ### Summary An Excessive Data Exposure vulnerability in the customers search … | There are no reported fixed by versions. |