CVE-2021-25791

PoC —

CVSS 3.1

5.4 medium

EPSS

3%p84

Published

Jul 23, 2021 (Jul 23, 2021)

Modified

Jun 17, 2026

Description

Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.

Vendors: online doctor appointment system php full source code project
Products: online doctor appointment system php full source code
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.