CGM CLININET Stored Cross-Site Scripting Vulnerability in Ward Module

A stored cross-site scripting vulnerability has been identified in the CGM CLININET software, specifically within the 'Oddział' (Ward) module. This issue arises in the death diagnosis description field, where it allows the execution of arbitrary JavaScript code. The exploitation of this vulnerability could lead to session hijacking of other users and potentially escalate privileges to full administrative rights.

Impact

Exploitation of this vulnerability allows for session hijacking and could lead to unauthorized administrative access.