Critical · 9.9 CVE-2025-47663 EUVD-2025-28113GHSA-f9xv-95hg-pxgf

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mojoomla Product: Hospital Management System

Description

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11.

Affected products

Vendor	Product	Affected	Fixed
mojoomla	Hospital Management System	47.0(20 – ≤ 11	—

References

https://patchstack.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-2023-arbitrary-file-upload-vulnerability-2?_s_id=cve vdb-entry