CVE-2025-2870

Name of the Vulnerable Software and Affected Versions Clinic Queuing System version 1.0

Description The issue is a Reflected Cross-Site Scripting (XSS) vulnerability. This could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in "/patient side.php" API endpoint.

Recommendations For Clinic Queuing System version 1.0, consider disabling the /patient side.php endpoint until a patch is available, or restrict access to it to minimize the risk of exploitation. Avoid using the page parameter in the affected API endpoint until the issue is resolved.