A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/disease_symptoms_view.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user to store dangerous JavaScript payloads on the system that will be triggered when the page loads.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published: 2023-11-30T13:49:20.255Z
Updated: 2024-08-02T08:28:21.840Z
Reserved: 2023-11-30T10:45:53.504Z
Link: CVE-2023-6424
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-11-30T14:15:20.127
Modified: 2023-12-02T04:38:39.837
Link: CVE-2023-6424
Redhat
No data.