Vulnerability history

Subscriber+ Cross-User Appointment Data Modification vulnerability

Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion vulnerability

Insecure Direct Object References (IDOR) vulnerability

Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation vulnerability

Unauthenticated Sensitive Information Exposure via REST API vulnerability

Broken Access Control vulnerability

Content Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Insufficient Authorization vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Auth. Stored Cross-Site Scripting (XSS) vulnerability

Contributor+ Stored XSS vulnerability

Cross-Site Scripting (XSS) vulnerability