PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php.Referenceshttps://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-hms3/