CVE-2026-112093: fallo de gravedad media en subhajitkhan online-clinic-management-system
subhajitkhan online-clinic-management-system feedback.php cross site scripting
Publicada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.3%
probabilidad de explotación
0.3%top 80% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
subhajitkhan · online-clinic-management-systemPoCs públicas encontradas — 1
cve_referencegithub.com/subhajitkhan/online-clinic-management-system/issues/7no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — subhajitkhan online-clinic-management-system
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-90858MEDIUMsubhajitkhan online-clinic-management-system adminappview.php session_start authorizationEPSS 0.5%CVE-2026-90805MEDIUMsubhajitkhan online-clinic-management-system doctorlogin.php sql injectionEPSS 0.4%CVE-2026-90701MEDIUMsubhajitkhan online-clinic-management-system listdoctor.php sql injectionEPSS 0.4%CVE-2026-112092MEDIUMsubhajitkhan online-clinic-management-system Doctor Registration doctorregistration.php echo cross site scriptingEPSS 0.3%CVE-2026-112139MEDIUMsubhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injectionEPSS 0.3%CVE-2026-116482MEDIUMsubhajitkhan online-clinic-management-system patientregistration.php cross site scriptingEPSS 0.3%