Cross-Site Scripting Vulnerability in SourceCodester Drug Recommendation System
CVE-2026-108919

5.3MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Drug Recommendation System
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108919?

A cross-site scripting vulnerability has been identified in the SourceCodester Drug Recommendation System version 1.0. The flaw resides in an unknown function within the Auth/add_student.php file, specifically affecting the Student Registration component. By manipulating the arguments txtname, txtpassword, txtemail, txtphone, and txtprevious_school, an attacker can execute malicious scripts in the context of the user's browser. This vulnerability allows for remote execution and has been disclosed publicly, making it critical for users to address this issue promptly.

Affected Version(s)

Drug Recommendation System 1.0

References

https://vuldb.com/vuln/416732
vdb-entrytechnical-description
https://vuldb.com/vuln/416732/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108919
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

swj99557271 (VulDB User)
VulDB Vulnerability Moderation Team
.