EA
Product
easyappointments
13
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 3Low 4
Watch
Add easyappointments to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-52839 | 3.3 | Jul 14 | Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass Affected: < 1.6.0 |
| CVE-2026-52841 | 3.1 | Jul 14 | Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync Affected: < 1.6.0 |
| CVE-2026-52840 | 2.7 | Jul 14 | Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network Affected: < 1.6.0 |
| CVE-2026-52838 | 2.6 | Jul 14 | Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS Affected: < 1.6.0 |
Showing 4