SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81798

HIGH · CVSS 7.1 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Easy Appointments versions up to 4.0.2.1 are vulnerable to a DOM-Based Cross-Site Scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using affected versions should prioritize patching this vulnerability to mitigate risks associated with XSS attacks.

CVE
CVE-2026-81798
Severity
HIGH
CVSS
7.1
EPSS
0.15%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1.