CVE-2026-3170: SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3170?
CVE-2026-3170 is classified as a cross-site scripting vulnerability, which can lead to unauthorized access and data manipulation.
How do I fix CVE-2026-3170?
To fix CVE-2026-3170, sanitize and validate all user inputs in the patient-search.php file to prevent script injection.
What software is affected by CVE-2026-3170?
CVE-2026-3170 affects SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System version 1.0.
What type of vulnerability is CVE-2026-3170?
CVE-2026-3170 is a cross-site scripting (XSS) vulnerability.
Is CVE-2026-3170 easy to exploit?
Yes, CVE-2026-3170 can be relatively easy to exploit if user input is not properly sanitized.