A vulnerability was found in itsourcecode Hospital Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting.

This vulnerability is documented as CVE-2026-11512. The attack can be initiated remotely. Additionally, an exploit exists.