CVE-2025-6613

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection CWE-129 — Improper Array Index Validation4 documents4 sources

Severity

5.1MEDIUM

EPSS

0.1%

top 82.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Phpgurukul Hospital Management System Anujk305 Hospital Management System

Timeline

PublishedJun 25

Latest updateNov 20

Description

A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0. Affected by this vulnerability is an unknown functionality of the file /doctor/manage-patient.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5phpgurukul/hospital_management_system4.0

▶NVDanujk305/hospital_management_system4.0

🔴Vulnerability Details

GHSA

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs↗2025-11-20

▶

GHSA

GHSA-rmv2-rpx6-jqp8: A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4↗2025-06-26

▶

CVEList

PHPGurukul Hospital Management System manage-patient.php cross site scripting↗2025-06-25

▶