medium5.4Public exploit code
CVE-2021-25791
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attacker…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS2021-01-08 · webapps · php
Impact
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Doctor Appointment System Php Full Source Code Project | Online Doctor Appointment System Php Full Source Code | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.exploit-db.com/exploits/49396
- https://www.sourcecodester.com
- https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html
- https://www.exploit-db.com/exploits/49396
- https://www.sourcecodester.com
- https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html