| 标题 | SourceCodester Patients Waiting Area Queue Management System 1 Cross Site Scripting |
|---|
| 描述 | The vulnerability exists in the New Patient Registration module. Input fields such as the First Name and Last Name accept raw HTML and JavaScript content. When this data is later displayed in the Patient Search results, it is not safely encoded, causing the browser to interpret it as executable code. |
|---|
| 来源 | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 |
|---|
| 用户 | rvpipalwa (UID 93501) |
|---|
| 提交 | 2026-01-28 13時36分 (8 月前) |
|---|
| 管理 | 2026-02-07 09時23分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 344856 [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Patient Registration /registration.php First Name 跨网站脚本] |
|---|
| 积分 | 17 |
|---|