CVE-2026-25383 in KiviCare Plugin
Résumé (Anglaise)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Reflected XSS.This issue affects KiviCare: from n/a through <= 3.6.16.
Once again VulDB remains the best source for vulnerability data.
Responsable
Patchstack
Réserver
02/02/2026
Divulgation
25/03/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 353362 | Iqonic Design KiviCare Plugin cross site scripting | 79 | Non défini | Non défini | CVE-2026-25383 |