Report Title | Event ID | Severity | Vulnerability Type |
---|---|---|---|
Blind XSS on login page disclosing admin panel access | FirstBlood v3 | CRITICAL | Stored XSS |
[COLLAB] Able to update profile picture of doctor | FirstBlood v3 | High | Stored XSS |
Stored XSS leading to account takeover in admin user's dashboard via signing up for hackerback | FirstBlood v3 | CRITICAL | Stored XSS |
DOM XSS on doctors.php via doctor parameter | FirstBlood v3 | Medium | Reflective XSS |