<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: clinic queuing system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-2870: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System</title><link>https://patchthecve.com/cve/CVE-2025-2870.html</link><guid>https://patchthecve.com/cve/CVE-2025-2870.html</guid><pubDate>Wed, 17 Jun 2026 09:07:46 +0000</pubDate><description>MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim&#x27;s browser by sending a malicious URL through the page parameter in /patient_side.php.</description></item><item><title>CVE-2025-2869: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System</title><link>https://patchthecve.com/cve/CVE-2025-2869.html</link><guid>https://patchthecve.com/cve/CVE-2025-2869.html</guid><pubDate>Wed, 17 Jun 2026 09:07:46 +0000</pubDate><description>MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim&#x27;s browser by sending a malicious URL through the id parameter in /manage_user.php.</description></item><item><title>CVE-2025-2868: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System</title><link>https://patchthecve.com/cve/CVE-2025-2868.html</link><guid>https://patchthecve.com/cve/CVE-2025-2868.html</guid><pubDate>Wed, 17 Jun 2026 09:07:45 +0000</pubDate><description>MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim&#x27;s browser by sending a malicious URL through the page parameter in /index.php.</description></item><item><title>CVE-2024-6273: A vulnerability was found in SourceCodester Clinic Queuing System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-6273.html</link><guid>https://patchthecve.com/cve/CVE-2024-6273.html</guid><pubDate>Wed, 17 Jun 2026 08:17:40 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function save_patient of the file patient_side.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack c</description></item></channel></rss>