CVE-2026-108919: SourceCodester Drug Recommendation System Student Registration add_student.php cross site scripting
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
No privileges are required, and the attack can be initiated remotely. However, the CVSS vector indicates user interaction is required.
What is the expected security impact?
The CVSS assessment indicates low integrity impact, with no assessed confidentiality or availability impact. The issue is rated medium severity with a base score of 4.3.
Is public exploit information available?
Yes. The available data states that an exploit has been made public and could be used in attacks.