CVE-2025-7148

CVE-2025-7148 concerns CodeAstro Simple Hospital Management System 1.0. The issue affects an unknown function within the file /patient.html of the POST Parameter Handler, where input manipulation leads to cross-site scripting. The vulnerability can be exploited remotely and multiple parameters ma...

CVE-2025-7153

CodeAstro Simple Hospital Management System 1.0 is affected by a remote cross-site scripting (XSS) vulnerability in the POST Parameter Handler, triggered by manipulating the First Name, Last Name, or Address arguments in /doctor.html. The issue is exploitable remotely and has been disclosed publi...