alextselegidis/easyappointments is vulnerable to stored cross-site scripting in versions 1.4.3 and prior. A patch is available at commit bddc5cbeb7ff237a72943b304dcb01c653781767 and anticipated to be part of version 1.5.0.

Affected Packages

Packagist alextselegidis/easyappointments

Affected versions: 0 (last affected: 1.4.3)

Related CVEs

CVE-2023-2102

Key Information

GHSA ID

GHSA-j6qq-9939-9jv8

Published

April 15, 2023 3:30 PM

Last Modified

April 21, 2023 8:34 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

alextselegidis/easyappointments

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.