CVE-2021-27318
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.
- Affected products
- Doctor Appointment System
- Doctor Appointment System Project Doctor Appointment System
- = 1.0
- Fix
- Available
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 1.5% (71th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2021-03-01
CVE-2021-27318 at NVD
2 known exploits for CVE-2021-27318
Proof-of-concept code and exploit modules indexed by Sploitus