Cross Site Scripting in SourceCodester Patients Waiting Area Queue Management System by Patrick Mvuma

CVE-2026-2154

What is CVE-2026-2154?

A vulnerability exists in the Patients Waiting Area Queue Management System by SourceCodester, specifically within the Patient Registration Module. An improperly handled input in the /registration.php file allows attackers to manipulate the 'First Name' argument, enabling cross site scripting attacks. This security flaw can be exploited remotely, leading to unauthorized script execution in the context of the user’s session. Publicly available exploits for this vulnerability increase the urgency for users to apply necessary security patches to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References