PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.Referenceshttps://exploit-db.com/exploits/43988/