← All advisories

Moderate severityNVD Advisory· Published Aug 25, 2025· Updated Sep 22, 2025

CVE-2025-50383

CVE-2025-50383

Description

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
alextselegidis/easyappointmentsPackagist	< 1.5.2-beta.1	1.5.2-beta.1

Affected products

2

Alextselegidis/Easyappointmentscpe-rescue
ghsa-coords
pkg:composer/alextselegidis/easyappointments
Range: < 1.5.2-beta.1

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-2f28-69j7-85hfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-50383ghsaADVISORY
easyappointments.orgghsaWEB
github.com/alextselegidis/easyappointments/commit/0f0d71cfe0692daed9aee59bc424ce2a084fd59eghsaWEB
github.com/alextselegidis/easyappointments/releases/tag/1.5.2-beta.1ghsaWEB
alextselegidis.commitre
easyappointments.orgmitre

News mentions

0

No linked articles in our index yet.