CVE-2020-5193 — Cross-site Scripting in Hospital Management System

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 47.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Hospital Management System
Timeline
PublishedJan 14
Latest updateMay 24

Description

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w2h8-2r6j-r3qq: PHPGurukul Hospital Management System in PHP v4↗2022-05-24
▶
CVEList
CVE-2020-5193: PHPGurukul Hospital Management System in PHP v4↗2020-01-14
▶
CVE-2020-5193 — Cross-site Scripting | cvebase