GHSA-3wf7-83q3-948c

ghsaUSosv

Remote code execution in alextselegidis/easyappointments

view advisory published 2025-02-13Licence: CC-BY-4.0

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-57601US	—	0.52% (44th)	—	2025-02-12
Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

references

External citations — patches, advisories, analysis.

https://github.com/alextselegidis/easyappointmentsPACKAGE
https://hkohi.ca/vulnerability/13WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-57601ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan