CVE-2025-30036

Stored XSS vulnerability exists in the "Oddział" Ward module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights...

CVE-2025-30036: Improper Neutralization of Input During Web Page Generation

Stored XSS vulnerability exists in the "Oddział" Ward module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights...

PT-2025-34843 · Oddział · Oddział

Name of the Vulnerable Software and Affected Versions: Oddział module affected versions not specified Description: A stored cross-site scripting XSS issue exists in the “Oddział” Ward module, specifically within the death diagnosis description field. Successful exploitation allows attackers to...