Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Easy Appointments Component: Easy Appointments Clear all filters
TI-2023-14562 CVE-2023-30748 · GHSA-mc3r-mf88-6p5f

WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2024-12-09 No fix listed CWE-79
TI-2024-02654 CVE-2024-2844 · GHSA-2vp3-qj4j-9chv

Easy Appointments <= 3.11.18 - Insufficient Authorization

Priority LOW 26

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00432 Published 2024-03-29 No fix listed CWE-862
TI-2024-02652 CVE-2024-2842 · GHSA-9764-6h7c-x5rv

Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Easy Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ea_full_calendar' shortcode in all versions up to, and including, 3.11.18 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-03-29 No fix listed CWE-79
TI-2022-04266 CVE-2022-4668 · GHSA-2xhc-425v-mmxp

Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to per…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 3.11.2