RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)

Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 13/04/2021 Exploit Author: Saud Ahmad Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic Version: 2.0 Tested on: Windows 10 CVE : CVE-2021-30030, CVE-2021-30034,...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329

CVE-2021-31329 describes a Cross Site Scripting (XSS) vulnerability in Remote Clinic v2.0, exploitable via the Chat and Personal Address fields on staff/register.php. The connected documents corroborate the issue (CNVD/CNNVD, Red Hat/PRION/CVE lists, and Exploit DB entry referencing Stored XSS in...