CVE-2025-41003 | Imaster Patient Record Management System Endpoint edit_patient.php firstname cross site scripting

January 12, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Imaster Patient Record Management System. The impacted element is an unknown function of the file /projects/hospital/admin/edit_patient.php of the component Endpoint. Executing a manipulation of the argument firstname can lead to cross site scripting.

This vulnerability appears as CVE-2025-41003. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More