CVE-2024-37803

2024-06-1800:00:00

mitre

www.cve.org

codeprojects

health care

hospital management system

stored xss

staff info

0.0004 Low

EPSS

Percentile

9.1%

JSON

Multiple stored cross-site scripting (XSS) vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page.