Nsquared Simply Schedule Appointments
9 CVEs affecting Nsquared Simply Schedule Appointments. Latest disclosed: 2026-07-13. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39493 | Critical | 9.3 | 2026-06-15 | Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions. |
CVE-2026-39495 | High | 8.5 | 2026-04-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply Schedule Appointments simply-schedule-app… |
CVE-2026-42384 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. |
CVE-2026-57317 | High | 7.1 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. |
CVE-2026-39447 | High | 7.1 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions. |
CVE-2026-59523 | Medium | 6.5 | 2026-07-13 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-57812 | Medium | 6.5 | 2026-07-13 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Contr… |
CVE-2025-69315 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-39694 | Medium | 5.3 | 2026-04-08 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Contr… |