CVE-2025-66918
High · 8.8CVSS
8.8
EPSS
0.6%
Published
Dec 11, 2025
CISA due date
—
The record
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|