CVE-2026-95396

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8

Description A remote cross site scripting issue exists within the Public Search Handlers component, specifically in the HospitalController.java file. The flaw allows an attacker to execute malicious scripts by manipulating the Search argument. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.