CVE-2025-2868: ORETNOM23 Clinic Queuing System

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in /index.php.

Affected products

• ORETNOM23 Clinic Queuing System: version 1.0 only

Published 2025-03-28. Last modified 2026-06-17.