VYPR

Clinic Pro

by Clinic Pro

CVEs (1)

  • CVE-2019-25473HigMar 12, 2026
    risk 0.46cvss 7.1epss 0.00

    Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthly_expense_overview endpoint with crafted month values using…