CodeAstro Patient Record Management System Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in CodeAstro Patient Record Management System version 1.0. This issue arises in the 'Generate New Report Page' component, where the 'Patient Name/Name' argument can be manipulated to inject malicious scripts. The vulnerability can be exploited remotely and requires user interaction.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, navigate to the 'Generate New Report Page' in the CodeAstro Patient Record Management System. Inject a script into the 'Patient Name/Name' field. Once the report is generated, the injected script will be executed, demonstrating the cross-site scripting vulnerability.