| عنوان | CodeAstro Simple-Hospital-Management-System-in-Python 1.0 Cross Site Scripting |
|---|
| الوصف | A critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Available Doctor's file of CodeAstro Simple Hospital Management System in Python. Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the page is viewed. |
|---|
| المصدر | ⚠️ https://github.com/Vanshdhawan188/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS-Doctors-Page/blob/main/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS-Doctors%20Page.md |
|---|
| المستخدم | Subhash Paudel (UID 66830) |
|---|
| ارسال | 29/06/2025 09:34 AM (1 سنة منذ) |
|---|
| الاعتدال | 07/07/2025 07:56 AM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 315091 [CodeAstro Simple Hospital Management System 1.0 POST Parameter /doctor.html First Name/Last name/Address البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|