Lucene search
CVE-2021-31329
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" fiel
Show more
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | Cross site scripting | 21 Apr 202116:15 | – | prion |
 | CVE-2021-31329 | 21 Apr 202115:25 | – | cvelist |
 | Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-31666) | 22 Apr 202100:00 | – | cnvd |
 | CVE-2021-31329 | 21 Apr 202116:15 | – | nvd |
 | RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS) | 22 Apr 202100:00 | – | exploitdb |
Node
| Source | Link |
|---|---|
| github | www.github.com/remoteclinic/RemoteClinic/issues/16 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Chat | request body | /staff/register.php | Stored Cross-Site Scripting (XSS) vulnerability in Chat and Personal Address fields. | CWE-79 |
| Personal Address | request body | /staff/register.php | Stored Cross-Site Scripting (XSS) vulnerability in Chat and Personal Address fields. | CWE-79 |
| Full Name | request body | /patients | Stored Cross-Site Scripting (XSS) vulnerability in Full Name field when registering a patient. | CWE-79 |
| Symptoms | request body | /dashboard | Stored Cross-Site Scripting (XSS) vulnerability in Symptoms field after registering a report. | CWE-79 |
| Medicine Name | request body | /medicines/ | Stored Cross-Site Scripting (XSS) vulnerability in Medicine Name field when creating a new medicine. | CWE-79 |
| Clinic Name | request body | /clinic/directory | Stored Cross-Site Scripting (XSS) vulnerability in multiple clinic registration fields. | CWE-79 |
| Clinic Address | request body | /clinic/directory | Stored Cross-Site Scripting (XSS) vulnerability in multiple clinic registration fields. | CWE-79 |
| Clinic City | request body | /clinic/directory | Stored Cross-Site Scripting (XSS) vulnerability in multiple clinic registration fields. | CWE-79 |
| Clinic Contact | request body | /clinic/directory | Stored Cross-Site Scripting (XSS) vulnerability in multiple clinic registration fields. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo21 Apr 2021 16:15Current
5.4Medium risk
Vulners AI Score5.4
CVSS23.5
CVSS35.4
EPSS0.0037