Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23 allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php.