Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-7016

Stored XSS in Smarttek Informatics' Smart Doctor

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges. This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Smarttek Informatics Smart Doctor

Default version status: affected

  • 0 to ≤ 21.11.2024affected

References