high8.1
CVE-2025-50383
Easy!Appointments SQL injection vulnerability
Impact
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | alextselegidis/easyappointments | < 1.5.2-beta.1 | 1.5.2-beta.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyappointments | Easy\!Appointments | Version 1.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://easyappointments.org/
- https://github.com/Abdullah4eb/CVE-2025-50383
- https://github.com/advisories/GHSA-2f28-69j7-85hf
- https://nvd.nist.gov/vuln/detail/CVE-2025-50383
- https://easyappointments.org
- https://github.com/alextselegidis/easyappointments/commit/0f0d71cfe0692daed9aee59bc424ce2a084fd59e
- https://github.com/alextselegidis/easyappointments/releases/tag/1.5.2-beta.1