CVE:CVE-2023-2103
CNNVD:CNNVD-202304-1256
Easy!Appointments是一套基于Web的预约、日程管理系统。
Easy!Appointments 1.5.0 之前版本存在跨站脚本漏洞，攻击者利用该漏洞可以在被攻击网站和被攻击用户的上下文中执行任意 JavaScript。
solution:Upgrade easyappointments easyappointments to a higher version than 1.5.0,and avoid the version (,1.5.0)