A vulnerability described as problematic has been identified in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting.
The identification of this vulnerability is CVE-2025-9754. The attack may be launched remotely. Furthermore, there is an exploit available.
