CVE-2026-2150: SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scripting
A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /checkin.php. This manipulation of the argument patientid causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2150?
CVE-2026-2150 has been classified as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2026-2150?
To fix CVE-2026-2150, sanitize and validate all user inputs in the checkin.php file to prevent injection of malicious scripts.
What software is affected by CVE-2026-2150?
CVE-2026-2150 affects version 1.0 of the SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System.
What is cross-site scripting in the context of CVE-2026-2150?
In the context of CVE-2026-2150, cross-site scripting allows attackers to inject malicious scripts that can execute in users' browsers.
Is there a patch available for CVE-2026-2150?
Currently, there is no official patch for CVE-2026-2150, so manual code fixes are necessary.