Veille CVE

Octobre 2026

2 CVE

  1. CVE-2026-110382 7.1 Élevée

    NSquared Simply Schedule Appointments

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.

  2. CVE-2026-110381 6.3 Moyenne

    NSquared Simply Schedule Appointments

    Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.