CVE-2024-56998
CVSS 3.1 Score 4.2 of 10 (medium)
Details
Published Jan 21, 2025
CWE ID 79
Summary
CVE-2024-56998: A cross-site scripting (XSS) vulnerability has been identified in the PHPGurukul Hospital Management System 4.0. This issue is located in the /edit-profile.php file and can be exploited through the parameter $address. Attackers can inject malicious scripts, potentially leading to unauthorized data access or theft of user session cookies. It is crucial that users and administrators apply the necessary patches or upgrades as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.