Executive brief
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Affected products
- Packagist alextselegidis/easyappointments
Junglewise Threat Intelligence
CVE-2023-2103: alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
CVE-2023-2103 · Severity: low · CVSS 3.1 · Published 2023-04-15
Technologies: alextselegidis/easyappointments (Packagist). Vendors: Packagist.
Related threats
- Easy!Appointments excessive data exposure in customer search
- Easy!Appointments authorization bypass in Google OAuth provider binding
- alextselegidis Easy!Appointments SSRF in CalDAV connection test
- Easy!Appointments authorization bypass in appointment store and update
- Easy!Appointments stored XSS in booking disabled message