~ / search / GHSA-3wf7-83q3-948c

GHSA-3wf7-83q3-948c

Remote code execution in alextselegidis/easyappointments

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-57601

Packages

EcosystemPackageAffectedFixed in
Packagist alextselegidis/easyappointments <= 1.5.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

References

External links from the advisory. They lead to third-party sites.