GHSA-5xp3-74rq-rwc5MediumCVSS 7.3
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-109521
- https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/11
- https://github.com/girishsaraf/Online-Appointment-Booking-System
- https://vuldb.com/cve/CVE-2026-109521
- https://vuldb.com/submit/984339
- https://vuldb.com/vuln/417184
- https://vuldb.com/vuln/417184/cti
- https://github.com/advisories/GHSA-5xp3-74rq-rwc5