Code-Projects Hospital Information System vulnerabilities

7 CVEs affecting Code-Projects Hospital Information System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86302, published 2026-09-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-37070, published 2023-08-14. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2026-86302, published 2026-09-07. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup…
CVE-2026-85399, published 2026-09-04. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php.…
CVE-2026-85398, published 2026-09-04. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection.…
CVE-2026-85397, published 2026-09-04. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql…
CVE-2026-76574, published 2026-08-19. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login…
CVE-2026-86301, published 2026-09-07. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management.…