https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 09:11:07 +0000 https://cve.radiocsirt.org/vuln/cve-2026-23622 <p><strong>Affected:</strong> alextselegidis easyappointments</p> <p>Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify() only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from GET (or $_REQUEST), so an attacker can perform CSRF by forcing a victim&#39;s browser to issue a crafted GET request. Impact: creation of admin accounts, modification of admin email/password, and full admin account takeover.</p> <p><strong>Affected:</strong> alextselegidis easyappointments</p> <p>Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify() only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from GET (or $_REQUEST), so an attacker can perform CSRF by forcing a victim&#39;s browser to issue a crafted GET request. Impact: creation of admin accounts, modification of admin email/password, and full admin account takeover.</p> https://cve.radiocsirt.org/vuln/cve-2026-23622