CVE-2025-6452: CodeAstro Patient Record Management System Generate New Report Page cross site scripting
A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6452?
CVE-2025-6452 has been rated as problematic.
How does CVE-2025-6452 affect the CodeAstro Patient Record Management System?
CVE-2025-6452 affects the processing of the Generate New Report Page by allowing cross site scripting through manipulation of the Patient Name/Name argument.
What type of vulnerability is CVE-2025-6452?
CVE-2025-6452 is identified as a cross site scripting vulnerability.
How can I mitigate CVE-2025-6452?
Mitigation for CVE-2025-6452 includes validating and sanitizing user inputs for the Patient Name/Name field.
Is CVE-2025-6452 present in all versions of CodeAstro Patient Record Management System?
The details do not specify if CVE-2025-6452 is present in all versions, but it affects version 1.0 of the system.