---
id: CVE-2026-116482
title: >-
  subhajitkhan online-clinic-management-system patientregistration.php cross
  site scripting
summary: >-
  A vulnerability has been found in subhajitkhan online-clinic-management-system
  up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown
  function of the file patientregistration.php. Such manipulation of the
  argument pat_nam…
severity: low
cvss: 3.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-79
  - CWE-94
vendor: subhajitkhan
product: online-clinic-management-system
affected:
  - online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-31T01:47:33.190732Z'
exploitAvailable: true
published: '2026-10-26'
updated: '2026-10-31'
sourceUpdated: '2026-10-31T01:47:51.709Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116482'
references:
  - url: 'https://vuldb.com/vuln/426393'
    label: >-
      VDB-426393 | subhajitkhan online-clinic-management-system
      patientregistration.php cross site scripting
  - url: 'https://vuldb.com/vuln/426393/cti'
    label: 'VDB-426393 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-116482'
    label: CVE-2026-116482 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1021725'
    label: >-
      Submit #1021725 | subhajitkhan online-clinic-management-system
      e9ee77a8827a1446220fa07ee693dc4d9a29a578 Cross Site Scripting
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/issues/12'
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/'
tags:
  - cve.org
  - exploit-available
epss: 0.00253
epssPercentile: 0.16885
ingestedAt: '2026-10-26T20:39:42.621Z'
---

## Overview

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown function of the file patientregistration.php. Such manipulation of the argument pat_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.