CVE-2021-25791

Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated…

published July 23, 2021

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02535 · 84.8th percentile
Published
2021-07-23T17:44Z
EPSS history
Timeline
  • 23 JUL 17:44Z
    Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated…
    cvelistv5