CVE-2026-1147: falha de média gravidade em Patrick Mvuma Patients Waiting Area Queue…
SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_patient_schedule.php cross site scripting
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Patients Waiting Area Queue Management System+ Monitorar Patients Waiting Area Queue Management System
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.3%
A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/api_patient_schedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
Patrick Mvuma · Patients Waiting Area Queue Management SystemSourceCodester · Patients Waiting Area Queue Management SystemCVEs relacionadas — Patrick Mvuma Patients Waiting Area Queue…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-3817MEDIUMSourceCodester Patients Waiting Area Queue Management System patient-search.php improper authorizationEPSS 0.6%CVE-2025-13122MEDIUMSourceCodester Patients Waiting Area Queue Management System api_patient_checkin.php getPatientAppointment sql injectionEPSS 0.5%CVE-2025-13248MEDIUMSourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injectionEPSS 0.4%CVE-2026-2150MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scriptingEPSS 0.4%CVE-2026-2149MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scriptingEPSS 0.4%CVE-2026-2154MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scriptingEPSS 0.4%