CVE-2022-36548

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability at /patient/settings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field...

CVE-2022-36548

CVE-2022-36548 concerns Edoc-doctor-appointment-system v1.0.1, where a stored cross-site scripting (XSS) flaw exists in the /patient/settings.php endpoint. The vulnerability arises from unsafely handling user input in the Name field, permitting attackers to inject arbitrary scripts or HTML that c...