Sourcecodester · Doctor Appointment System · CVE-2026-36324
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Doctor Appointment System version 1.0
**Description**
Cross Site Scripting (XSS) occurs due to improper handling of user-supplied input within the user registration functionality. The issue is located in the 'register.php' endpoint.
**Recommendations**
Update SourceCodester Doctor Appointment System version 1.0 to a patched version. As a temporary workaround, restrict access to the 'register.php' endpoint to minimize the risk of exploitation.