CVE:CVE-2020-25271
CNNVD:CNNVD-202010-266
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHPGroup和开放源代码社区的共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。
PHPGurukul hospital-management-system-in-php 4.0版本存在跨站脚本漏洞，该漏洞源于admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php。
solution:Upgrade phpgurukul hospital_management_system_in_php to a higher version than 4.0,and avoid the version 4.0