Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filtersEasy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass
Easy!Appointments SQL injection vulnerability
Easy!Appointments Denial of Service (DoS)
Remote code execution in alextselegidis/easyappointments
Easy!Appointments Improper Restriction of Excessive Authentication Attempts
Easy!Appointments Improper Access Control vulnerability
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
alextselegidis/easyappointments Session Fixation vulnerability
alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Code Injection in alextselegidis/easyappointments
Easy!Appointments uses hard-coded credentials
Privilege escalation in easyappointments
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.