PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter.
No PoCs from references.
- https://github.com/kirito999/HMS_stored_XSS