CVE-2022-36548

2022-08-2620:37:53

mitre

www.cve.org

edoc-doctor-appointment-system

stored cross-site scripting

name text field

web scripts

0.001 Low

EPSS

Percentile

22.7%

JSON

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field.