A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patient_id results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-appointments-XSS.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.344851 | Permissions Required VDB Entry |
| https://vuldb.com/?id.344851 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.747920 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
10 Feb 2026, 14:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-appointments-XSS.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.344851 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.344851 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.747920 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Pamzey patients Waiting Area Queue Management System
Pamzey |
08 Feb 2026, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-08 11:15
Updated : 2026-02-10 14:50
NVD link : CVE-2026-2149
Mitre link : CVE-2026-2149
CVE.ORG link : CVE-2026-2149
JSON object : View
Products Affected
pamzey
- patients_waiting_area_queue_management_system