CVE-2022-25408: XSS
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25408?
The severity of CVE-2022-25408 is medium with a CVSS score of 5.4.
How does CVE-2022-25408 affect Hospital Management System v1.0?
CVE-2022-25408 affects Hospital Management System v1.0 by allowing for stored cross-site scripting (XSS) attacks via the dpassword parameter in the /admin-panel1.php endpoint.
How can I fix the stored cross-site scripting (XSS) vulnerability in Hospital Management System v1.0?
To fix the stored cross-site scripting (XSS) vulnerability in Hospital Management System v1.0, you should validate and sanitize user input to prevent malicious scripts from being executed.
Is there a known public reference for CVE-2022-25408?
Yes, there is a known public reference for CVE-2022-25408. You can find it at this link: https://github.com/kishan0725/Hospital-Management-System/issues/22
What is the common weakness enumeration (CWE) ID associated with CVE-2022-25408?
The common weakness enumeration (CWE) ID associated with CVE-2022-25408 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').