Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm//zuordnung/veranstaltungen/" through the "school" input field.
CWE-79, CWE-79