CVE-2022-36547 | BDVDB-2026-183313 Detail

Description#

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/HashenUdara/edoc-doctor-appointment-system
https://github.com/onEpAth936/cve/blob/master/bug_e/edoc-doctor-appointment-system/Reflected%20Cross%20Site%20Scripting%20%28XSS%29.md

Exploit#

No public exploit known

History#

Version 12022-08-26Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.