{"id":7141,"date":"2025-06-21T22:12:01","date_gmt":"2025-06-21T22:12:01","guid":{"rendered":"http:\/\/localhost\/?p=7141"},"modified":"2025-06-21T22:12:01","modified_gmt":"2025-06-21T22:12:01","slug":"codeastro-patient-record-management-system-generate-new-report-page-cross-site-scripting","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7141","title":{"rendered":"CodeAstro Patient Record Management System Generate New Report Page cross site scripting"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nCodeAstro Patient Record Management System Generate New Report Page cross site scripting<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-22T02:00:10.742Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
Product<\/th>\nPatient Record Management System<\/td>\n<\/tr>\n
Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n4.8 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:H\/UI:P\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA cross-site scripting (XSS) vulnerability in CodeAstro’s Patient Record Management System allows remote attackers to inject malicious scripts via the Patient Name field. This could lead to session hijacking or unauthorized data access. The vulnerability is considered medium severity due to its potential impact on sensitive healthcare data.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
Product<\/th>\nPatient Record Management System<\/td>\n<\/tr>\n
Affected Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n