Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67482)

Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of user-supplied data and output data validation filtering through the dpassword parameter in admin-panel1.php. An attacker could use the vulnerability to execute JavaScript code on the client side.