CVE-2021-25791

Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.

• CWE-79

• https://www.exploit-db.com/exploits/49396Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.comProduct
• https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.htmlProduct
• https://www.exploit-db.com/exploits/49396Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.comProduct
• https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.htmlProduct

Published

Jul 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25780An arbitrary file upload vulnerability has been identified i…7.2
• CVE-2021-25783Taocms v2.5Beta5 was discovered to contain a blind SQL injec…7.2
• CVE-2021-25784Taocms v2.5Beta5 was discovered to contain a blind SQL injec…7.2
• CVE-2021-25785Taocms v2.5Beta5 was discovered to contain a cross-site scri…4.8
• CVE-2021-25786An issue was discovered in QPDF version 10.0.4, allows remot…5.3
• CVE-2021-25790Multiple stored cross site scripting (XSS) vulnerabilities i…5.4
• CVE-2021-25801A buffer overflow vulnerability in the __Parse_indx componen…7.1
• CVE-2021-25802A buffer overflow vulnerability in the AVI_ExtractSubtitle c…7.1
• CVE-2021-25803A buffer overflow vulnerability in the vlc_input_attachment_…7.1
• CVE-2021-25804A NULL-pointer dereference in "Open" in avi.c of VideoLAN VL…7.5
• CVE-2021-25808A code injection vulnerability in backup/plugin.php of Bludi…7.8
• CVE-2021-25809UCMS 1.5.0 was discovered to contain a physical path leakage…5.3