https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3302.htmlhttps://patchthecve.com/cve/CVE-2026-3302.htmlWed, 17 Jun 2026 10:43:22 +0000MEDIUM 4.3: A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign Up Page. Executing a manipulation of the argument Email can lead to cross site scripting. The attack can be launched rehttps://patchthecve.com/cve/CVE-2025-3180.htmlhttps://patchthecve.com/cve/CVE-2025-3180.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The attack can be launched rehttps://patchthecve.com/cve/CVE-2025-3179.htmlhttps://patchthecve.com/cve/CVE-2025-3179.htmlWed, 17 Jun 2026 09:19:21 +0000HIGH 7.3: A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the attack remotely. The exhttps://patchthecve.com/cve/CVE-2025-3178.htmlhttps://patchthecve.com/cve/CVE-2025-3178.htmlWed, 17 Jun 2026 09:19:21 +0000HIGH 7.3: A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remote