[MEDIUM] typo3-appointments vulnerable to Cross-site Scripting

PKSA-6jzs-zs8d-3t7w CVE-2019-25094 GHSA-cf5r-3pvm-w64w

Affected package: innologi/typo3-appointments

Affected version: <2.0.6

Reported by:
GitHub