CVE-2021-41930: Online Covid Vaccination Scheduler System Project Online Covid Vaccination Scheduler System

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php.

Affected products

• Online Covid Vaccination Scheduler System Project Online Covid Vaccination Scheduler System: version 1.0 only

Published 2022-01-24. Last modified 2026-06-17.