7.1
Élevée
CVE-2026-110382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simply Schedule Appointments 1.6 | premières → 1.6.12.35 | Pas de correctif indiqué |
Autres CVE de Simply Schedule Appointments
Les 16 CVE de Simply Schedule Appointments →
CVE-2026-110381
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments…
6.3
Moyenne
CVE-2026-94673
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions
5.3
Moyenne
CVE-2026-94074
Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions
6.5
Moyenne
CVE-2026-84764
Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions
8.8
Élevée