MojoJoomla Hospital Management System Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the MojoJoomla Hospital Management System, specifically in versions through 47.0(20-11-2023). This vulnerability allows users to escalate their privileges, potentially leading to unauthorized access to higher-level functions or data within the application.

Impact

Exploitation of this vulnerability could allow a user with low privileges to gain higher-level access, potentially leading to full control over the website.

Remediation

Users are advised to update to a version of the Hospital Management System plugin for WordPress that is later than 47.0(20-11-2023). Patchstack has also issued a virtual patch to mitigate this vulnerability until an official fix is available.