CVE-2021-36352: CARE2X Hospital Information Management

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registration_admission/patient_register.php page with "name_middle", "addr_str", "station", "name_maiden", "name_2", "name_3" parameters.

Affected products

• CARE2X Hospital Information Management: version 2.7 only

Published 2021-08-26. Last modified 2026-06-17.