CVE-2025-23672

Name of the Vulnerable Software and Affected Versions NotFound Instant Appointment versions n/a through 1.2

Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into web pages.

Recommendations For versions n/a through 1.2, update to a version that fixes the improper neutralization of input during web page generation to prevent Cross-site Scripting attacks. As a temporary workaround, consider restricting user input to prevent malicious script injection until a patch is available.