https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:29:38.314040+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265365 EUVD-2026-265365 2026-10-17T04:29:38.362631+00:00 EUVD-2026-265365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41003 fkie_cve-2025-41003 2026-10-17T04:29:38.362672+00:00

Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint ‘/projects/hospital/admin/edit_patient.php’. By injecting a malicious script into the ‘firstname’ parameter, the JavaScript code is stored and executed every time a user accesses the patient list, allowing an attacker to execute arbitrary JavaScript in a victim's browser.

 https://cve.radiocsirt.org/vuln/ghsa-3gxp-j77p-vmqh GHSA-3gxp-j77p-vmqh 2026-10-17T04:29:38.362710+00:00

Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint ‘/projects/hospital/admin/edit_patient.php’. By injecting a malicious script into the ‘firstname’ parameter, the JavaScript code is stored and executed every time a user accesses the patient list, allowing an attacker to execute arbitrary JavaScript in a victim's browser.