CVE-2026-82554: SourceCodester Queue Management System add_customer.php cross site scripting
A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be initiated remotely and requires no privileges, but it requires user interaction. An exploit has been published, increasing the likelihood of attempted exploitation.
Which deployments are known to be affected?
The affected product is SourceCodester Queue Management System 1.0. The available information does not state whether other versions or default deployments are affected.
What input should be investigated for signs of exploitation?
Investigate requests to /api/add_customer.php, particularly the Name argument. The flaw is triggered by manipulating that argument to inject cross-site scripting content.