CVE-2022-36203

PoC —

CVSS 3.1

6.1 medium

EPSS

1%p61

Published

Aug 31, 2022 (Aug 31, 2022)

Modified

Jun 17, 2026

Description

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.

Vendors: doctor\'s appointment system project
Products: doctor\'s appointment system
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.