5.1
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/api_patient_schedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Basic Information
ID
CVE-2026-1147
Source
VulDB
Published
Jan 19, 2026 at 09:02
Affected Product
Vendor
SourceCodester
Product
Patients Waiting Area Queue Management System
Version
1.0
Affected Versions
SourceCodester Patients Waiting Area Queue Management System 1.0
Patrick Mvuma Patients Waiting Area Queue Management System 1.0
Patrick Mvuma Patients Waiting Area Queue Management System 1.0