4 ms·

For appointments, just as an example, I believe emis and others offer their own separate systems and apps for this and also provide hosted sites. No idea if the

For appointments, just as an example, I believe emis and others offer their own separate systems and apps for this and also provide hosted sites. No idea if they are more secure but that's where the important data lives, on systems like that, not on these wordpress sites. There are 2-3 that almost all gps use, not sure on hospitals. http://www.emis-online.com http://www.emis-online.com I do agree with most of what you're saying though, and this is far from an ideal situation. Probably a central system makes most sense long term but gov seems unable (or more recently unwilling) to deliver.

vertex-four 13y ago
The point is that if I send you an email, claiming to be your GP, telling you about "our new appointments system", and linking to something like: http://yourgpwebsite.nhs.uk/some-vulnerable-page?xss=.. http://yourgpwebsite.nhs.uk/some-vulnerable-page?xss=... And my XSS replaces the page with something that looks like an appointments system, the average person has no way of knowing that they shouldn't trust this. There's certainly none of the usual indicators.