RA
Product
Rox Appointment Booking
5
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Rox Appointment Booking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87891 | 6.5 | Sep 12 | Rox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST API Affected: before 1.2.0 |
| CVE-2026-87907 | 5.3 | Sep 16 | Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes Affected: before 1.2.8 |
| CVE-2026-87896 | 5.3 | Sep 16 | Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route Affected: before 1.2.8 |
| CVE-2026-87894 | 5.3 | Sep 12 | Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR Affected: 1.0.9 before 1.2.3 |
| CVE-2026-87892 | 5.3 | Sep 12 | Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass Affected: before 1.2.0 |
Showing 5