Booked Scheduler version 2.8.5 suffers from cross site scripting and open redirection vulnerabilities. Continue reading...