Skip to content
OpenAdvisories

Product · Alex Tselegidis

easyappointments

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page

    Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule view at `/index.php/booking/reschedule/{appointment_hash}` (handled by `Booking::index()`) embeds the entire customer record as inline Java…