CVE-2025-50383

Published Aug 25, 2025·Updated Jul 5, 2026

NVD Description

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

[POC] CVE-2025-50383 — CVE-2025-50383

A low-privileged user can exploit this via a crafted order_by parameter, causing time-based blind SQL injection.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Get alerted for CVEs like this