PT-2026-6982 · Sourcecodester · Patient Registration Module+1

Rvpipalwa · Publicado 2026-02-08 · Atualizado 2026-02-08 · CVE-2026-2154

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System version 1.0

Description A cross site scripting issue exists due to the manipulation of the First Name argument. This affects an unknown function within the /registration.php file of the Patient Registration Module. Remote exploitation is possible, and an exploit is publicly available.

Recommendations Apply any available updates to address the issue in the Patient Registration Module. As a temporary workaround, consider sanitizing the First Name input to prevent script injection. Restrict access to the /registration.php file to minimize the risk of exploitation.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-2154

Produtos afetados

Patient Registration Module

Patients Waiting Area Queue Management System

Referências · 8

• 🔥 https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 · Exploit
• https://vuldb.com/?ctiid.344856 · Nota
• https://vuldb.com/?submit.748208 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2154 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-2154 · Aviso do Fabricante
• https://t.me/cveNotify/151300 · Publicação no Telegram
• https://t.me/CVEtracker/44103 · Publicação no Telegram
• https://vuldb.com/?id.344856 · Nota