VDB
Sign up
HIGH7.3

GHSA-9qvw-fhj2-xqmv

Code Injection in alextselegidis/easyappointments

Quick fix

GHSA-9qvw-fhj2-xqmv — alextselegidis/easyappointments: upgrade to the fixed version with the command below.

composer require alextselegidis/easyappointments:^1.5.0

Details

Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0 due to unescaped output.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/alextselegidis/easyappointments
Introduced in: 0Fixed in: 1.5.0
Fixcomposer require alextselegidis/easyappointments:^1.5.0

References