CVE-2026-11512
MediumCVSS 4.3Summary
A vulnerability has been detected in itsourcecode Hospital Management System version 1.0, affecting unknown processing of the file /billing.php. Manipulation of the argument patientid leads to cross site scripting.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of data theft or session hijacking.
Recommendation
It is recommended to update the system to the latest version and implement input data filtering to prevent XSS attacks.
Original NVD description (English source)
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.