CVE-2019-25094

Name of the Vulnerable Software and Affected Versions innologi appointments Extension versions up to 2.0.5

Description A problematic vulnerability was found in the innologi appointments Extension, affecting an unknown part of the component Appointment Handler. The manipulation of the formfield argument leads to cross-site scripting. It is possible to initiate the attack remotely.

Recommendations For versions up to 2.0.5, upgrade to version 2.0.6 to address this issue. As a temporary workaround, consider restricting the manipulation of the formfield argument to minimize the risk of exploitation.