CVE-2021-27318: Doctor Appointment System Project Doctor Appointment System

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.

Affected products

• Doctor Appointment System Project Doctor Appointment System: version 1.0 only

Published 2021-03-01. Last modified 2026-06-17.