| عنوان | SourceCodester Patients Waiting Area Queue Management System 1 Cross Site Scripting |
|---|
| الوصف | The vulnerability exists in the New Patient Registration module. Input fields such as the First Name and Last Name accept raw HTML and JavaScript content. When this data is later displayed in the Patient Search results, it is not safely encoded, causing the browser to interpret it as executable code. |
|---|
| المصدر | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 |
|---|
| المستخدم | rvpipalwa (UID 93501) |
|---|
| ارسال | 28/01/2026 01:36 PM (3 أشهر منذ) |
|---|
| الاعتدال | 07/02/2026 09:23 AM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 344856 [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Patient Registration /registration.php First Name البرمجة عبر المواقع] |
|---|
| النقاط | 17 |
|---|