Cross Site Scripting Vulnerability in SourceCodester Drug Recommendation System
CVE-2026-108920

5.3MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Drug Recommendation System
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108920?

A cross site scripting vulnerability has been identified in version 1.0 of the SourceCodester Drug Recommendation System. This issue arises from improper handling of user-supplied data in the Admin/user_record.php file, allowing attackers to manipulate the 'name/email' input fields. If exploited, this flaw can enable remote attacks, allowing unauthorized scripts to be executed in the context of users accessing the affected application. Given that this exploit has been publicly disclosed, it presents a significant security risk that demands immediate attention.

Affected Version(s)

Drug Recommendation System 1.0

References

https://vuldb.com/vuln/416733
vdb-entrytechnical-description
https://vuldb.com/vuln/416733/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108920
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

swj99557271 (VulDB User)
VulDB Vulnerability Moderation Team
.