Sourcecodester · Doctor Appointment System · CVE-2026-3302
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Doctor Appointment System version 1.0
**Description**
A cross site scripting issue exists in the Sign Up Page component of SourceCodester Doctor Appointment System. The issue is related to the manipulation of the `Email` argument in the `/register.php` file. This allows for remote attacks, and an exploit has been publicly released.
**Recommendations**
Apply any available updates to address this issue. As a temporary workaround, consider sanitizing the `Email` parameter in the `/register.php` file to prevent the injection of malicious scripts.