Description
A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field.
Unscored
CVE-2020-36011
EUVD-2020-23594GHSA-mxww-cpwx-rp55
A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arb…
Published Jan 26, 2021 · Updated Jul 9, 2026 · Assigned by mitre