| Package | Affected versions | Patched versions |
|---|---|---|
| doctor appointment management system | = 1.0.0 |
In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free