CVE-2023-6422

Summary

CVE-2023-6422 is a newly discovered cross-site scripting (XSS) vulnerability affecting the BigProf Online Clinic Management System version 2.2. The issue arises from insufficient input encoding in the /clinic/patients_view.php file, specifically in the FirstRecord parameter. This flaw enables an attacker to inject malicious JavaScript code that can be executed when the page loads, potentially allowing unauthorized access or data theft. Users are advised to update their systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.