Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-45805 1 Phpgurukul 1 Doctor Appointment Management System 2025-12-16 7.6 High
In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.