PT-2026-6982 · Sourcecodester · Patient Registration Module+1

Rvpipalwa · Published 2026-02-08 · Updated 2026-02-08 · CVE-2026-2154

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System version 1.0

Description A cross site scripting issue exists due to the manipulation of the First Name argument. This affects an unknown function within the /registration.php file of the Patient Registration Module. Remote exploitation is possible, and an exploit is publicly available.

Recommendations Apply any available updates to address the issue in the Patient Registration Module. As a temporary workaround, consider sanitizing the First Name input to prevent script injection. Restrict access to the /registration.php file to minimize the risk of exploitation.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-2154

Affected Products

Patient Registration Module

Patients Waiting Area Queue Management System

References · 8

• 🔥 https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2154 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2154 · Vendor Advisory
• https://vuldb.com/?ctiid.344856 · Note
• https://vuldb.com/?submit.748208 · Note
• https://t.me/cveNotify/151300 · Telegram Post
• https://t.me/CVEtracker/44103 · Telegram Post
• https://vuldb.com/?id.344856 · Note