Medium severity4.8NVD Advisory· Published Nov 21, 2024· Updated Jun 17, 2026
CVE-2024-7016
CVE-2024-7016
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges.
This issue affects Smart Doctor: through 21.11.2024.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
3cpe:2.3:a:smarttek:smart_doctor:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:smarttek:smart_doctor:*:*:*:*:*:*:*:*range: <=2024-11-21
- (no CPE)range: <=21.11.2024
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.usom.gov.tr/bildirim/tr-24-1865nvdThird Party Advisory
- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1865nvd
News mentions
0No linked articles in our index yet.