CVE-2026-36388 | PHPGurukul Hospital Management System 4.0 Doctor Interface edit-profile.php User Name cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /hospital/hms/edit-profile.php of the component Doctor Interface. Performing a manipulation of the argument User Name results in cross site scripting.

This vulnerability is reported as CVE-2026-36388. The attack is possible to be carried out remotely. No exploit exists.