# CVE-2026-112092: online-clinic-management-system stored cross-site scripting in doctor registration

Source: https://junglewise.ai/threats/cve-2026-112092-a-flaw-has-been-found-in-subhajitkhan-online-clinic-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-112092 · Severity: medium · CVSS 4.3 · Published 2026-10-19

An online clinic appointment booking system stores unvalidated doctor registration data and displays it publicly without protection, allowing attackers to inject malicious code. When patients or administrators view the doctor directory, the injected code executes in their browsers, potentially stealing session credentials or personal health information.

Technologies: [Subhajitkhan Online-Clinic-Management-System](https://junglewise.ai/threats/technologies/subhajitkhan-online-clinic-management-system). Vendors: [Subhajitkhan](https://junglewise.ai/threats/vendors/subhajitkhan).

## Quick answers

**Is CVE-2026-112092 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-112092 being exploited in the wild.

**How severe is CVE-2026-112092?** Medium severity, with a CVSS score of 4.3, published 19 October 2026.

**Which products and versions are affected?** Subhajitkhan Online-Clinic-Management-System up to e9ee77a8827a1446220fa07ee693dc4d9a29a578.

**Is there a fix for CVE-2026-112092?** No fixed version is recorded yet. Validate all profile fields server-side and encode every untrusted value for HTML context using htmlspecialchars($value, ENT_QUOTES, 'UTF-8') or equivalent in every location where doctor data is displayed. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-112092 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-112092?** Check whether you run Subhajitkhan Online-Clinic-Management-System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Validate all profile fields server-side and encode every untrusted value for HTML context using htmlspecialchars($value, ENT_QUOTES, 'UTF-8') or equivalent in every location where doctor data is displayed.

## Technical details

Stored cross-site scripting (XSS) in the doctor registration module: the doctorregistration.php file inserts the doc_name parameter directly into the database without encoding, and listdoctor.php and admindocview.php echo it back as raw HTML. An unauthenticated attacker can register a malicious doctor account with JavaScript payload in the doc_name field, which executes when any user views the public doctor directory or an administrator reviews registrations.

## Affected products

- subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578

## Timeline

- 2026-10-19: disclosed
- 2026-10-02: other: Issue reported to maintainer on GitHub

## References

- [https://github.com/subhajitkhan/online-clinic-management-system/](https://github.com/subhajitkhan/online-clinic-management-system/)
- [https://github.com/subhajitkhan/online-clinic-management-system/issues/6](https://github.com/subhajitkhan/online-clinic-management-system/issues/6)

## Related threats

- [online-clinic-management-system improper input validation in appointment booking](https://junglewise.ai/threats/cve-2026-115249-a-flaw-has-been-found-in-subhajitkhan-online-clinic-management)
- [subhajitkhan online-clinic-management-system workflow enforcement in patappointtime.php](https://junglewise.ai/threats/cve-2026-115248-a-vulnerability-was-detected-in-subhajitkhan-online-clinic)
- [subhajitkhan online-clinic-management-system missing encryption of sensitive data](https://junglewise.ai/threats/cve-2026-115247-a-security-vulnerability-has-been-detected-in-subhajitkhan)
- [online-clinic-management-system SQL injection in admin handler](https://junglewise.ai/threats/cve-2026-112139-a-vulnerability-has-been-found-in-subhajitkhan-online-clinic)
- [subhajitkhan online-clinic-management-system stored XSS in feedback](https://junglewise.ai/threats/cve-2026-112093-a-vulnerability-has-been-found-in-subhajitkhan-online-clinic)