CVE-2025-66918: XSS
Published Dec 11, 2025
·Updated
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
Affected Software
2 affected components
edoc edoc-doctor-appointment-system
Hashenudara Edoc-doctor-appointment-system=1.0.1
Remediation
Event History
Dec 11, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-66918?
CVE-2025-66918 is classified as a medium-severity vulnerability due to its potential for Cross Site Scripting (XSS).
2
How do I fix CVE-2025-66918?
To fix CVE-2025-66918, validate and sanitize the 'title' parameter in admin/add-session.php to prevent XSS attacks.
3
What software versions are affected by CVE-2025-66918?
CVE-2025-66918 affects edoc-doctor-appointment-system version 1.0.1.
4
What type of vulnerability is CVE-2025-66918?
CVE-2025-66918 is a Cross Site Scripting (XSS) vulnerability.
5
Can CVE-2025-66918 allow unauthorized script execution?
Yes, CVE-2025-66918 can allow attackers to execute unauthorized scripts in the context of a user’s session.