Skip to content

Known vulnerabilities in NSquared Simply Schedule Appointments

Is your version affected?

CVE Summary Score Published
CVE-2026-110382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply… 7.1 High Oct 18, 2026
CVE-2026-110381 Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments… 6.3 Medium Oct 15, 2026
CVE-2026-94673 Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions 5.3 Medium Sep 30, 2026
CVE-2026-94074 Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions 6.5 Medium Sep 30, 2026
CVE-2026-84764 Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions 8.8 High Sep 2, 2026
CVE-2026-65513 Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions 7.1 High Aug 6, 2026
CVE-2026-65508 Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions 9.3 Critical Aug 6, 2026
CVE-2026-57812 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows… 6.5 Medium Jul 13, 2026
CVE-2026-59523 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows… 6.5 Medium Jul 13, 2026
CVE-2026-57317 Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions 7.1 High Jun 26, 2026
CVE-2026-42384 Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions 7.5 High Jun 15, 2026
CVE-2026-39493 Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions 9.3 Critical Jun 15, 2026
CVE-2026-39447 Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions 7.1 High Jun 15, 2026
CVE-2026-39694 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows… 5.3 Medium Apr 8, 2026
CVE-2026-39495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply… 8.5 High Apr 8, 2026
CVE-2025-69315 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows… 6.5 Medium Jan 22, 2026

Other NSquared products