Cross site scripting

2021-01-2618:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field.

CPENameOperatorVersion
smart_hospitaleq3.1

CPE	Name	Operator	Version
	smart_hospital	eq	3.1

References

qdocs.com

www.exploit-db.com/exploits/49290