CVE-2025-2869 — Cross-site Scripting in Queuing System

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.8MEDIUMNVD
EPSS
0.1%
top 67.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Clinic Queuing SystemOretnom23 Clinic Queuing System
Timeline
PublishedMar 28

Description

Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manage_user.php.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-rcp5-qv59-99x9: Reflected Cross-Site Scripting (XSS) vulnerability in version 1↗2025-03-28
▶
CVEList
Reflected Cross-Site Scripting (XSS) vulnerability in Clinic Queuing System↗2025-03-28
▶
CVE-2025-2869 — Cross-site Scripting in Queuing System | cvebase