What’s Vulnerable › Products

Online Scheduling and Appointment Booking System vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Online Scheduling and Appointment Booking System version is affected

Latest Online Scheduling and Appointment Booking System vulnerabilities

• CVE-2026-86841 — Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options (CVSS 4.7)
• CVE-2026-86839 — Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR (CVSS 3.8)
• CVE-2026-91847 — Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR (CVSS 4.8)
• CVE-2026-13395 — Bookly < 27.8 - Unauthenticated SQL Injection via staff_id (CVSS 8.6)