CVE-2024-46238

PoC —

CVSS 3.1

5.9 medium

EPSS

<1%p21

Published

Oct 21, 2024 (Oct 21, 2024)

Modified

Jun 17, 2026

Description

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php

Vendors: phpgurukul
Products: hospital management system
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.