{"id":"GHSA-2f28-69j7-85hf","aliases":["CVE-2025-50383"],"title":"Easy!Appointments SQL injection vulnerability","description":"alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.","severity":"medium","score":5.7,"published":"2025-08-26T00:31:14.000Z","modified":"2025-08-26T21:42:25.797Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"alextselegidis/easyappointments","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.5.2-beta.1"}],"type":"ECOSYSTEM"}],"versions":["1.1.0","1.1.0-beta.1","1.1.0-beta.2","1.1.1","1.2.0","1.2.0-alpha.1","1.2.0-beta.1","1.2.1","1.3.0","1.3.0-alpha.1","1.3.0-beta.1","1.3.0-beta.2","1.3.1","1.3.1-beta.1","1.3.2","1.3.2-beta.1","1.4.0","1.4.0-beta.1","1.4.1","1.4.2","1.4.2-beta.1","1.4.3","1.4.3-beta.1"],"fixed":["1.5.2-beta.1"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-50383","https://github.com/alextselegidis/easyappointments/commit/0f0d71cfe0692daed9aee59bc424ce2a084fd59e","https://easyappointments.org","https://github.com/Abdullah4eb/CVE-2025-50383","https://github.com/alextselegidis/easyappointments","https://github.com/alextselegidis/easyappointments/releases/tag/1.5.2-beta.1"],"sources":[{"name":"OSV","id":"GHSA-2f28-69j7-85hf","modified":"2025-08-26T21:42:25.797957Z","url":"https://osv.dev/vulnerability/GHSA-2f28-69j7-85hf"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","score":5.7}]}