CVE-2023-40277

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting XSS vulnerability has been discovered in the login.jsp message parameter...

CVE-2023-40277

OpenClinic GA 5.247.01 contains a reflected XSS in the login.jsp message parameter. The vulnerability affects the login flow and is documented with CVSSv3.1 base score 6.1 (MEDIUM) with Network attack vector, low attack complexity, no privileges, user interaction required, and changed scope (C/L/...