CVE-2022-36548: XSS

Published Aug 26, 2022

Updated

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field.

Affected Software

2 affected components

Edoc-doctor-appointment-system Project Edoc-doctor-appointment-system=1.0.1

Hashenudara Edoc-doctor-appointment-system=1.0.1

Event History

Aug 26, 2022

CVE Published

via MITRE·08:37 PM

Data Sourced

via MITRE·08:37 PM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-36548?

CVE-2022-36548 has a medium severity rating due to its potential for exploitation through stored cross-site scripting (XSS).

How do I fix CVE-2022-36548?

To fix CVE-2022-36548, validate and sanitize user inputs in the Name text field to prevent XSS attacks.

What type of vulnerability is CVE-2022-36548?

CVE-2022-36548 is classified as a stored cross-site scripting (XSS) vulnerability.

Where is CVE-2022-36548 located in the software?

CVE-2022-36548 is located in the /patient/settings.php file of the Edoc-doctor-appointment-system version 1.0.1.

Who is affected by CVE-2022-36548?

Users of Edoc-doctor-appointment-system version 1.0.1 are affected by CVE-2022-36548.