CVE-2022-36203

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 31, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-36216.5A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of theCVE-2022-362157.2DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.CVE-2022-362167.2DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.CVE-2022-36224.1The Blog2Social plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in versions up to, and includinCVE-2022-362209.8Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the broCVE-2022-362216.5Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to read any named pipe filCVE-2022-362228.4Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account caCVE-2022-362236.1In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token andCVE-2022-362248.8XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2022-362258.8EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add.CVE-2022-362267.2SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.CVE-2022-362279.8In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if th
CVE-2022-36203: Medium severity, CVSS 6.1 | Vulnix