---
id: CVE-2026-115535
title: gedelumbung HospitalManagement Settings sistem.php simpan cross site scripting
summary: >-
  A vulnerability was identified in gedelumbung HospitalManagement up to
  c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function
  sistem.php::simpan of the file
  application/modules/admin/controllers/sistem.php of the …
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-79
  - CWE-94
vendor: gedelumbung
product: HospitalManagement
affected:
  - HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T00:15:18.401Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115535'
references:
  - url: 'https://vuldb.com/vuln/425388'
    label: >-
      VDB-425388 | gedelumbung HospitalManagement Settings sistem.php simpan
      cross site scripting
  - url: 'https://vuldb.com/vuln/425388/cti'
    label: 'VDB-425388 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-115535'
    label: CVE-2026-115535 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1021799'
    label: >-
      Submit #1021799 | gedelumbung HospitalManagement
      c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting
  - url: 'https://github.com/gedelumbung/HospitalManagement/issues/15'
  - url: 'https://github.com/gedelumbung/HospitalManagement/'
tags:
  - cve.org
ingestedAt: '2026-10-23T01:11:52.506Z'
---

## Overview

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Settings Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.