PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.
doctor search script project doctor search script 1.0.2