Vulnerability history

Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure vulnerability

Unauthenticated Appointment Cancellation/Confirmation vulnerability

Unauthenticated Arbitrary Appointment Modification and Deletion vulnerability

Cross Site Scripting (XSS) vulnerability

Contributor+ Sensitive Information Disclosure via REST Appointments Listing vulnerability

Sensitive Data Exposure vulnerability

Insecure Direct Object References (IDOR) vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References (IDOR) vulnerability

Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion vulnerability

Insecure Direct Object References (IDOR) vulnerability

Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation vulnerability

Unauthenticated Sensitive Information Exposure via REST API vulnerability

Broken Access Control vulnerability

Content Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Insufficient Authorization vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Auth. Stored Cross-Site Scripting (XSS) vulnerability

Contributor+ Stored XSS vulnerability

Cross-Site Scripting (XSS) vulnerability