CVE-2024-12983
CVSS 3.1 Score 2.4 of 10 (low)
Details
Published Dec 27, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-12983 is a recently disclosed vulnerability affecting the Hospital Management System 1.0, specifically the Edit Doctor Details Page located at /hms/admin/manage-doctors.php. This issue allows an attacker to execute cross-site scripting (XSS) attacks by manipulating the Doctor Name argument. The impact extends beyond this parameter, and the exploit can be initiated remotely, increasing the risk to users. This vulnerability has become publicly known, increasing the likelihood of exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Hospital Management System