Cross-Site Scripting in gedelumbung HospitalManagement Admin Routing Page

CVE-2026-115536

What is CVE-2026-115536?

A security flaw has been found in gedelumbung HospitalManagement affecting the admin routing page’s 'simpan' function in the file application/modules/admin/controllers/routing_pages.php. This vulnerability enables remote attackers to manipulate the 'content' argument, leading to cross-site scripting attacks. The issue was communicated to the project maintainers early via an issue report; however, no response has been recorded yet. The specific product involved employs a rolling release model for continuous updates, and thus detailed versioning information on affected or patched releases is not publicly available. Users are advised to monitor the project’s updates closely for potential fixes.

References