Nosh Chartingsystem Project Nosh Chartingsystem
2 CVEs affecting Nosh Chartingsystem Project Nosh Chartingsystem. Latest disclosed: 2023-02-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24610 | High | 8.8 | 2023-02-01 | NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. Th… |
CVE-2023-24065 | Medium | 5.4 | 2023-01-29 | NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload t… |