CVE-2026-108920: SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting

Published Oct 12, 2026

Updated

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

1 affected component

SourceCodester Drug Recommendation System=1.0

Event History

Oct 12, 2026

CVE Published

via MITRE·06:30 PM

Data Sourced

via MITRE·06:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker can launch the attack remotely and does not need prior privileges. Successful exploitation requires a user to interact with the crafted content.

Which inputs are implicated?

The affected Admin/user_record.php functionality is vulnerable when the name or email argument is manipulated. The issue is associated with the Admin Record Tables component.

Is public exploit information available?

Yes. The exploit has been publicly disclosed and may be used.