CVE-2025-7153

CVE-2025-7153 describes a problematic cross-site scripting (XSS) vulnerability in CodeAstro Simple Hospital Management System 1.0, specifically within the /doctor.html component's POST Parameter Handler. An attacker can inject malicious scripts by manipulating the "First Name," "Last Name," or "Address" arguments. This vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and leading to low impact on confidentiality and integrity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei, and it currently lacks significant community discussion or media coverage.