CVE-2022-36547: XSS
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36547?
CVE-2022-36547 is classified as a high severity reflected cross-site scripting (XSS) vulnerability.
How do I fix CVE-2022-36547?
To fix CVE-2022-36547, implement proper input validation and output encoding in the Search field to prevent script injection.
What impact does CVE-2022-36547 have on the Edoc Doctor Appointment System?
CVE-2022-36547 allows attackers to execute arbitrary scripts in the context of the user's browser, potentially compromising sensitive information.
Which version of Edoc Doctor Appointment System is affected by CVE-2022-36547?
The affected version is 1.0.1 of Edoc Doctor Appointment System.
How can I identify if my application is vulnerable to CVE-2022-36547?
You can identify vulnerability by testing the Search field for script injection and observing if arbitrary scripts are executed.