[LOW] Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass

PKSA-9k3m-y8wr-wv52 CVE-2026-52839 GHSA-w8xc-8g92-v77h

Affected package: alextselegidis/easyappointments

Affected version: <=1.5.2

Reported by:
GitHub