CVE-2022-26244

MediumCVSS 5.4

Published: 30/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to inject malicious scripts or HTML via the 'special' field.

Risk Assessment

The risk involves arbitrary script execution in users' browsers, potentially leading to session hijacking, data leakage, or further attacks on the organization.

Recommendation

Immediately update the system to the latest version and implement input validation and sanitization for all form fields.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field.