CVE-2021-39411
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 0.9%
exploitation probability
0.9%top 45% of all CVEs
observed exploitation
nono source reports it
Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b) admin/patient-search.php, and the (2) fromdate and (3) todate parameters in admin/betweendates-detailsreports.php.
Affected products
n/a · n/a