CVE-2021-25791 PoC — Online Doctor Appointment System 跨站脚本漏洞

Source

https://github.com/MrCraniums/CVE-2021-25791-Multiple-Stored-XSS

Associated Vulnerability

Title:Online Doctor Appointment System 跨站脚本漏洞 (CVE-2021-25791)
Description:Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.

Description

Multiple Stored XSS Online Doctor Appointment System

Readme

# CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System 
Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0
Software Link: https://www.sourcecodester.com/download-code?nid=14663&title=Online+Doctor+Appointment+System+in+PHP+with+Full+Source+Code


https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25791

https://nvd.nist.gov/vuln/detail/CVE-2021-25791

## POC 
https://www.exploit-db.com/exploits/49396


## Discovery
- January 2021
- Mohamed habib Smidi | Craniums .

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!