CVE-2026-2154: SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scripting
A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown function of the file /registration.php of the component Patient Registration Module. The manipulation of the argument First Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2154?
CVE-2026-2154 is classified as a cross-site scripting (XSS) vulnerability, which can potentially allow attackers to inject malicious scripts into web pages viewed by users.
How do I fix CVE-2026-2154?
To fix CVE-2026-2154, validate and sanitize user inputs in the registration.php file to prevent XSS attacks.
What software is affected by CVE-2026-2154?
CVE-2026-2154 affects SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System version 1.0.
Can CVE-2026-2154 lead to a data breach?
Yes, CVE-2026-2154 can lead to a data breach as attackers can potentially steal sensitive user information through XSS attacks.
Is CVE-2026-2154 easy to exploit?
CVE-2026-2154 can be relatively easy to exploit if proper sanitization measures are not implemented in the affected application.