Sisubeny

**Name of the Vulnerable Software and Affected Versions** vnotex vnote versions prior to 3.20.2 **Description** A weakness in the YAML Frontmatter component within the file `/src/data/extra/web/js/markdownit.js` allows for remote cross-site scripting. This occurs through the manipulation of the `p metaData` argument. Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A flaw in the `/medicine.php` file allows for remote exploitation via SQL injection. This occurs when the `editid` variable is manipulated, potentially allowing an attacker to interfere with the database queries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/medicine.php` file or avoid using the `editid` parameter until a patch is available.