Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy Appointments easy-appointments allows Code Injection.This issue affects Easy Appointments: from n/a through <= 3.12.14.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 06 Nov 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy Appointments easy-appointments allows Code Injection.This issue affects Easy Appointments: from n/a through <= 3.12.14. | |
| Title | WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability | |
| Weaknesses | CWE-80 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2025-11-06T15:53:53.979Z
Reserved: 2025-06-04T15:44:03.662Z
Link: CVE-2025-49398
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-11-06T16:15:53.890
Modified: 2025-11-06T19:45:09.883
Link: CVE-2025-49398
Redhat
No data.
OpenCVE Enrichment
No data.