CVE-2026-2149: SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patientid results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2149?
CVE-2026-2149 is considered a high severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2026-2149?
To fix CVE-2026-2149, ensure that the application properly validates and sanitizes user input to prevent XSS.
What is the impact of CVE-2026-2149?
The impact of CVE-2026-2149 includes the risk of an attacker injecting malicious scripts that can manipulate user sessions or steal sensitive information.
Which versions are affected by CVE-2026-2149?
CVE-2026-2149 affects version 1.0 of the SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System.
How can I identify exploitation attempts for CVE-2026-2149?
Exploitation attempts for CVE-2026-2149 can be identified through unusual HTTP requests containing scripts or unexpected input in the application.