CVE-2024-46239 - Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php

Published Oct 21, 2024

5.9

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.

Affected products

Vendor PHP Gurukul Product Hospital Management System Default
n/a
- Version
  4.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PHP Gurukul

Hospital Management System

n/a

Version	Status	Constraints
4.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS3.md
ExploitThird Party Advisory

Link	Providers	Tags
https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS3.md		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 21, 2024

Updated Oct 21, 2024

Reserved Sep 11, 2024

Link CVE-2024-46239

CISA Vulnrichment

Updated Oct 21, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-46239

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-46239