CVE-2025-6452 MEDIUM

CVE-2025-6452: CodeAstro Patient Record Management System Generate New Report Page cross site scripting

Vendor Codeastro
Product Patient Record Management System
Weakness CWE-79 · XSS
Published June 22, 2025
Last update June 24, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

June 22, 2025 CVE published
June 24, 2025 Record updated