Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:53 a.m.2 views

CVE-2024-26454

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...

5.4CVSS6.5AI score0.00354EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.2 views

Microsoft Azure Health Bot 安全漏洞

Microsoft Azure Health Bot is an Artificial Intelligence-based service from Microsoft Corporation USA designed to provide automated chatbot solutions for healthcare. A security vulnerability exists in Microsoft Azure Health Bot. An attacker exploiting the vulnerability can elevate privileges...

8.8CVSS6.5AI score0.00544EPSS
Exploits0References2
NVD
NVD
added 2024/03/15 1:15 a.m.7 views

CVE-2024-26454

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...

5.4CVSS6.1AI score0.00354EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/15 12:0 a.m.13 views

CVE-2024-26454

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...

6.3AI score0.00354EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 12:0 a.m.9 views

CVE-2024-26454

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...

6.4AI score0.00354EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/15 12:0 a.m.2 views

Healthcare-Chatbot Security Vulnerability

Healthcare-Chatbot is a healthcare chatbot by Om Rajpurkar Personal Developer. A security vulnerability exists in Healthcare-Chatbot version 9b7058a and prior versions. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

5.4CVSS6.1AI score0.00354EPSS
Exploits0References3
CVE
CVE
added 2024/03/15 12:0 a.m.55 views

CVE-2024-26454

CVE-2024-26454 affects Healthcare-Chatbot (version up to 9b7058a). A Cross Site Scripting flaw allows an attacker to inject a crafted payload via the email1 or pwd1 parameter in login.php, enabling client-side script execution. The NVD entry lists CVSS-3.1 base score 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/...

5.4CVSS6.3AI score0.00354EPSS
Exploits0References2
Rows per page
Query Builder