CVE-2026-84764

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in Simply Schedule Appointments versions up to 1.6.12.23, allowing attackers to perform actions on behalf of users without their consent. This could lead to unauthorized changes or data exposure, significantly impacting the security of affected applications. Organizations using this scheduling tool should prioritize patching or mitigating this vulnerability to protect against potential exploitation.