CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-25435

A cross-site scripting (XSS) vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.9%

CVSS Severity

CVSS v3 Score 6.1

References

https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page
https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page

Products affected by CVE-2024-25435

Md1health » Md1patient » Version: 1.16.0

cpe:2.3:a:md1health:md1patient:1.16.0
Md1health » Md1patient » Version: 2.0.0

cpe:2.3:a:md1health:md1patient:2.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25435

Products

Pricing

Contact Us