medium6.1
CVE-2021-27318
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via t…
Impact
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doctor Appointment System Project | Doctor Appointment System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html
- https://www.sourcecodester.com/php/14182/doctor-appointment-system.html
- http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html
- https://www.sourcecodester.com/php/14182/doctor-appointment-system.html