CVE-2023-1180

CVE-2023-1180 affects SourceCodester Health Center Patient Record Management System v1.0. The vulnerability is an XSS caused by unsafely handling the hem_id parameter in the hematology_print.php file. Exploitation can be performed remotely and the exploit has been disclosed publicly (VDB-222331)....