Threats Tagged 'ghsa-86cp-frwj-3p8c'

CVE-2026-115246 is a cross-site scripting (XSS) vulnerability in the subhajitkhan online-clinic-management-system affecting the file patdocmsg.php. The vulnerability arises from improper handling of the 'Query' argument, allowing remote attackers to execute script code. The issue has been publicly disclosed and exploit code is available. The project has been notified but has not issued a response or fix. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.1.