Skip to content
OpenAdvisories

Archive

12 April 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2021-30030 Public exploit

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

  • Unscored —
    CVE-2021-30034 Public exploit

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.

  • Unscored —
    CVE-2021-30044 Public exploit

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

  • Unscored —
    CVE-2021-30042 Public exploit

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Con…

  • Unscored —
    CVE-2021-30039 Public exploit

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-rep…

  • Medium 5.6
    CVE-2021-23369 Public exploit

    Remote Code Execution (RCE)

    The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.