8.5
Élevée
CVE-2026-39495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Blind SQL Injection.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.9.27.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simply Schedule Appointments 1.6 | premières → 1.6.9.27 | Pas de correctif indiqué |
Autres CVE de Simply Schedule Appointments
Les 16 CVE de Simply Schedule Appointments →
CVE-2026-110382
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply…
7.1
Élevée
CVE-2026-110381
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments…
6.3
Moyenne
CVE-2026-94673
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions
5.3
Moyenne
CVE-2026-94074
Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions
6.5
Moyenne