Skip to content
Sign in
7.1 High

CVE-2026-28137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.9.

Affected products and versions

Product Affected versions Fixed in
MediCenter - Health Medical Clinic 14.9 earliest → 14.9 No fix stated

Other CVEs of MediCenter - Health Medical Clinic

The 3 CVEs of MediCenter - Health Medical Clinic →
CVE-2025-54014 Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows… 9.8 Critical CVE-2025-27013 Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting… 5.3 Medium
Track this CVE