CVE-2022-42206: XSS
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-42206.
What type of vulnerability is this?
This vulnerability is a Cross Site Scripting (XSS) vulnerability.
Which software is affected by this vulnerability?
The PHPGurukul Hospital Management System version 4.0 is affected by this vulnerability.
How can the vulnerability be exploited?
The vulnerability can be exploited by injecting malicious scripts into the doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php pages.
What is the severity of this vulnerability?
The severity of this vulnerability is medium, with a CVSS score of 5.4.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
Is there a fix available for this vulnerability?
It is recommended to update the PHPGurukul Hospital Management System to a version that has resolved this vulnerability.