CVE-2025-10614

MEDIUM

E-Logbook with Health Monitoring System for COVID-19 1.0 - Cross-Site Scripting via profile_id Parameter

Title source: llm

Description

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /print_reports_prev.php. Executing manipulation of the argument profile_id can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.324641

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.324641

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.649910

Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking

https://github.com/yihaofuweng/cve/issues/22

Product product

https://itsourcecode.com/

Scores

CVSS v3 4.3

EPSS 0.0032

EPSS Percentile 23.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-79 CWE-94

Status published

Products (1)

emiloi/e-logbook_with_health_monitoring_system_for_covid-19 1.0

Published Sep 17, 2025

Tracked Since Feb 18, 2026