CVE-2025-9774: RemoteClinic edit-patient.php information disclosure

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-01 · updated 2026-10-19
Weakness: CWE-200

Description

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

RemoteClinic: through 2.0

References

https://github.com/diy777/cve/issues/1
https://vuldb.com/?ctiid.322074
https://vuldb.com/?id.322074
https://vuldb.com/?submit.640954
https://github.com/diy777/cve/issues/1

Get alerted when CVE-2025-9774 or the next vulnerability affects your stack