| Titre | SourceCodester Patients Waiting Area Queue Management System 1 Cross Site Scripting |
|---|
| Description | The vulnerability exists in the New Patient Registration module. Input fields such as the First Name and Last Name accept raw HTML and JavaScript content. When this data is later displayed in the Patient Search results, it is not safely encoded, causing the browser to interpret it as executable code. |
|---|
| La source | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 |
|---|
| Utilisateur | rvpipalwa (UID 93501) |
|---|
| Soumission | 28/01/2026 13:36 (il y a 9 mois) |
|---|
| Modérer | 07/02/2026 09:23 (10 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 344856 [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Patient Registration /registration.php First Name cross site scripting] |
|---|
| Points | 17 |
|---|