CVE-2026-1146: SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1146?
CVE-2026-1146 has been rated as a moderate severity Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2026-1146?
To fix CVE-2026-1146, you should sanitize user inputs in api_register_patient.php to prevent XSS attacks.
What impact does CVE-2026-1146 have on users?
CVE-2026-1146 can allow attackers to execute arbitrary JavaScript in the context of authenticated users, compromising sensitive information.
Which version of the software is affected by CVE-2026-1146?
CVE-2026-1146 affects version 1.0 of the SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System.
Is CVE-2026-1146 easily exploitable?
Yes, CVE-2026-1146 can be easily exploited by injecting malicious scripts into the vulnerable input fields.