CVE-2026-3302: SourceCodester Doctor Appointment System Sign Up register.php cross site scripting
A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign Up Page. Executing a manipulation of the argument Email can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3302?
CVE-2026-3302 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-3302?
To fix CVE-2026-3302, sanitize and validate all user inputs in the /register.php file to prevent JavaScript injection.
What is affected in CVE-2026-3302?
CVE-2026-3302 affects the Sign Up functionality implemented in the /register.php file of SourceCodester Doctor Appointment System 1.0.
What types of attacks are possible with CVE-2026-3302?
CVE-2026-3302 can be exploited for cross-site scripting (XSS) attacks, allowing an attacker to execute scripts in the context of another user’s session.
Is there a patch available for CVE-2026-3302?
As of now, there has been no specific patch issued for CVE-2026-3302, so developers should manually secure the affected components.