# Online Scheduling and Appointment Booking System.

Every CVE that names Online Scheduling and Appointment Booking System among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options](https://agentprime.io/advisories/CVE-2026-86841.md)
  `CVE-2026-86841` · CVE record: Unknown Online Scheduling and Appointment Booking System · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Insecure deserialization
- [Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR](https://agentprime.io/advisories/CVE-2026-86839.md)
  `CVE-2026-86839` · CVE record: Unknown Online Scheduling and Appointment Booking System · CVSS 3.8 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Broken access control
- [Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR](https://agentprime.io/advisories/CVE-2026-91847.md)
  `CVE-2026-91847` · CVE record: Unknown Online Scheduling and Appointment Booking System · CVSS 4.8 Medium · Not analysed yet · Published 19 Sept 2026 · Tags: Broken access control
- [Bookly < 27.8 - Unauthenticated SQL Injection via staff_id](https://agentprime.io/advisories/CVE-2026-13395.md)
  `CVE-2026-13395` · CVE record: Unknown Online Scheduling and Appointment Booking System · CVSS 8.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=online-scheduling-and-appointment-booking-system>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/online-scheduling-and-appointment-booking-system/>. Everything for agents: <https://agentprime.io/llms.txt>.