Vulnerabilities > Edoc Doctor Appointment System Project > Edoc Doctor Appointment System > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-08-26	CVE-2022-36542	Unspecified vulnerability in Edoc-Doctor-Appointment-System Project Edoc-Doctor-Appointment-System 1.0.1 An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data. network low complexity edoc-doctor-appointment-system-project	6.5
2022-08-26	CVE-2022-36547	Cross-site Scripting vulnerability in Edoc-Doctor-Appointment-System Project Edoc-Doctor-Appointment-System 1.0.1 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. network low complexity edoc-doctor-appointment-system-project CWE-79	6.1
2022-08-26	CVE-2022-36548	Cross-site Scripting vulnerability in Edoc-Doctor-Appointment-System Project Edoc-Doctor-Appointment-System 1.0.1 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. network low complexity edoc-doctor-appointment-system-project CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.