5.3
Medium
CVE-2026-39694 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows…
Description
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.10.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simply Schedule Appointments 1.6 | earliest → 1.6.10.2 | No fix stated |
Other CVEs of Simply Schedule Appointments
The 16 CVEs of Simply Schedule Appointments →
CVE-2026-110382
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply…
7.1
High
CVE-2026-110381
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments…
6.3
Medium
CVE-2026-94673
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions
5.3
Medium
CVE-2026-94074
Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions
6.5
Medium