CVE-2024-57601: Remote code execution in alextselegidis/easyappointments

February 13, 2025 (updated February 14, 2025)

Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.

References

github.com/advisories/GHSA-3wf7-83q3-948c
github.com/alextselegidis/easyappointments
hkohi.ca/vulnerability/13
nvd.nist.gov/vuln/detail/CVE-2024-57601

Code Behaviors & Features

Detect and mitigate CVE-2024-57601 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →