PoC Index

CVE-2022-36203

MEDIUM 6.1EPSS 1.0%

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.

CVSS v3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
1.00% chance of exploitation in the next 30 days, 60th percentile
Published
2022-08-31
Updated
2024-08-03

Proof-of-concept exploits (1)

References

Related