8.5
High
CVE-2026-39495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Blind SQL Injection.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.9.27.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simply Schedule Appointments 1.6 | earliest → 1.6.9.27 | No fix stated |
Other CVEs of Simply Schedule Appointments
The 16 CVEs of Simply Schedule Appointments →
CVE-2026-110382
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply…
7.1
High
CVE-2026-110381
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments…
6.3
Medium
CVE-2026-94673
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions
5.3
Medium
CVE-2026-94074
Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions
6.5
Medium