CVEs-PoC/2021/CVE-2021-36352.md

CVE-2021-36352

Description

Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registration_admission/patient_register.php page with "name_middle", "addr_str", "station", "name_maiden", "name_2", "name_3" parameters.

POC

Reference

• https://www.exploit-db.com/exploits/50197

Github

No PoCs found on GitHub currently.