Microsoft Bookings Vulnerability Allows Unauthorized Changes to Meeting Details

A critical input validation vulnerability has been discovered in Microsoft Bookings, a scheduling tool integrated with Microsoft 365. The flaw allows attackers to inject arbitrary HTML into appointment fields.