PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9066
Reference (s):
- https://hackingvila.wordpress.com/2019/02/22/php-scripts-mall-php-appointment-booking-script-has-html-injection-via-an-edit-my-profile/

