CVE-2022-35117

CVE-2022-35117 affects Clinic's Patient Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via update_medicine_details.php, where an attacker can inject a crafted payload into the Packing text box in the Update Medical Details module to execute arbitrary we...

CVE-2022-35117: Improper Neutralization of Input During Web Page Generation

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...