Medium · 6.1 CVE-2024-25435 EUVD-2024-22764GHSA-6hcj-xq8v-5j7j

A cross-site scripting (XSS) vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a c…

Published Feb 28, 2024 · Updated Mar 28, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter.

References

https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page