Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64638
HistoryAug 16, 2023 - 12:00 a.m.

Hospital Management System SQL Injection Vulnerability (CNVD-2023-64629)

2023-08-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
sql injection
hospital management system
wordpress
php language
mysql
cross-site scripting
external videos
vulnerability

EPSS

0.001

Percentile

18.3%

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin External Videos. The vulnerability stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.

EPSS

0.001

Percentile

18.3%