Cross-site Scripting Vulnerability in Appointment Buddy Widget by Accrete Info Solution

CVE-2025-25099

What is CVE-2025-25099?

The Appointment Buddy Widget by Accrete Info Solution is susceptible to a Cross-site Scripting (XSS) vulnerability, which occurs due to improper neutralization of input during web page rendering. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by users, leading to unauthorized actions on behalf of users, theft of session cookies, or redirection to malicious websites. Users of the widget should take immediate action to secure their installations to prevent exploitation.

References