WordPress Appointment Scheduler Plugin <= 1.5 - XSS

Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...