CVE-2026-115534 | CVSS: 4.3 | 严重级别: MEDIUM
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument nama/email/alamat/telepon/pesan can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was
参考链接:
• https://github.com/gedelumbung/HospitalManagement/
• https://github.com/gedelumbung/HospitalManagement/issues/14
• https://vuldb.com/cve/CVE-2026-115534
📌 数据来源: NVD 官方