CVE-2025-9754: Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting
A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9754?
CVE-2025-9754 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-9754?
To fix CVE-2025-9754, ensure that input validation and output encoding practices are implemented in the edit-profile.php function.
Who is affected by CVE-2025-9754?
CVE-2025-9754 affects users of Campcodes Online Hospital Management System version 1.0.
What type of vulnerability is CVE-2025-9754?
CVE-2025-9754 is classified as a cross-site scripting (XSS) vulnerability.
What are the potential impacts of CVE-2025-9754?
The potential impacts of CVE-2025-9754 include unauthorized script execution and data theft from users.