7.1 Élevée

CVE-2026-28137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.9.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
MediCenter - Health Medical Clinic 14.9	premières → 14.9	Pas de correctif indiqué

Les 3 CVE de MediCenter - Health Medical Clinic →

CVE-2025-54014 Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows… 9.8 Critique CVE-2025-27013 Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting… 5.3 Moyenne

Vous utilisez MediCenter - Health Medical Clinic ?

Suivre cette CVE Surveiller MediCenter - Health Medical Clinic Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2026-28137

Chronologie

Publiée 5 mars 2026
Dernière modification 28 avril 2026

Références

patchstack.com patchstack.com

Suivre cette CVE

CVE-2026-28137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs…

Description

Produits et versions touchés

Autres CVE de MediCenter - Health Medical Clinic