Sourcecodester · Sourcecodester Clinics Patient Management System · CVE-2024-7645
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Clinics Patient Management System version 1.0
**Description**
A vulnerability was found in the User Page component, specifically in the file users.php, which can lead to cross-site request forgery. The attack can be initiated remotely.
**Recommendations**
For SourceCodester Clinics Patient Management System version 1.0, patch immediately and validate user input to prevent malicious requests. As a temporary workaround, consider restricting access to the users.php file until a patch is available.