Vulnerabilities > Qdocs > Smart Hospital > 3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-26	CVE-2020-36011	Cross-site Scripting vulnerability in Qdocs Smart Hospital 3.1 A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field. network low complexity qdocs CWE-79	4.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.