CVE-2026-11512

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description An issue exists in the processing of the '/billing.php' endpoint. Remote attackers can trigger cross-site scripting (XSS)—a technique where malicious scripts are injected into trusted websites—by manipulating the patientid argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.