Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09306
HistoryJan 27, 2022 - 12:00 a.m.

SourceCodester Hospital Patient Records Management System Cross-Site Scripting Vulnerability

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

21.4%

SourceCodester Hospital Patient Records Management System is a web-based PHP application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0 of the Management System. The vulnerability is related to the lack of valid validation of the description parameter in room_list. An attacker could use this vulnerability to inject JavaScript code and compromise site security.

0.001 Low

EPSS

Percentile

21.4%

Related for CNVD-2022-09306