CVE-2024-46239: XSS
Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46239?
CVE-2024-46239 has a moderate severity level due to the presence of multiple cross-site scripting vulnerabilities.
What are the affected components in CVE-2024-46239?
CVE-2024-46239 affects the /doctor/edit-profile.php and /admin/query-details.php components of PHPGurukul Hospital Management System 4.0.
How do I fix CVE-2024-46239?
To fix CVE-2024-46239, sanitize and validate user inputs for the docname and adminremark parameters to prevent XSS.
What impact does CVE-2024-46239 have on users?
CVE-2024-46239 allows attackers to inject malicious scripts, which can compromise user sessions and data security.
Is CVE-2024-46239 exploitative in nature?
Yes, CVE-2024-46239 can be exploited to execute arbitrary JavaScript code in the context of the user's browser.