CVE-2026-3171mediumCWE-79CWE-94

CVE-2026-3171: medium-severity vulnerability in Patrick Mvuma Patients Waiting Area Queue…

SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

Published

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.3%
A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P