{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.5.2"}],"component":"alextselegidis/easyappointments","cve_ids":["CVE-2026-23622"],"ecosystem":"Packagist","epss":0.00231,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-54v4-4685-vwrj","id":"tcs_01M5KEVKS310XW9YZKX729DHFP","modified_at":"2026-02-03T03:17:26.680927Z","published_at":"2026-01-15T20:11:23Z","references":["https://osv.dev/vulnerability/GHSA-54v4-4685-vwrj","https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-54v4-4685-vwrj","https://nvd.nist.gov/vuln/detail/CVE-2026-23622","https://github.com/alextselegidis/easyappointments","https://github.com/alextselegidis/easyappointments/blob/41c9b93a5a2c185a914f204412324d8980943fd5/application/core/EA_Security.php#L52"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-54v4-4685-vwrj","url":"https://osv.dev/vulnerability/GHSA-54v4-4685-vwrj"},{"source":"nvd","source_id":"CVE-2026-23622","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23622"}],"summary":"alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass"}