Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-2868

Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in /index.php.

Published

2025-03-28T11:15:37.840

Last Modified

2025-10-15T16:55:10.967

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oretnom23 clinic_queuing_system 1.0 Yes
References