Selman Konakci

**Name of the Vulnerable Software and Affected Versions** Smart Doctor versions through 21.11.2024 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. The vendor was contacted about this disclosure but did not respond. **Recommendations** For versions through 21.11.2024, as a temporary workaround, consider restricting user input in web page generation to minimize the risk of Stored XSS attacks. At the moment, there is no information about a newer version that contains a fix for this issue.