A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown function of the file /registration.php of the component Patient Registration Module. The manipulation of the argument First Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
References
| Link | Resource |
|---|---|
| https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 | Exploit Mitigation Third Party Advisory |
| https://vuldb.com/?ctiid.344856 | Permissions Required VDB Entry |
| https://vuldb.com/?id.344856 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.748208 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
10 Feb 2026, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Pamzey patients Waiting Area Queue Management System
Pamzey |
|
| References | () https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6 - Exploit, Mitigation, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.344856 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.344856 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.748208 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:* |
08 Feb 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-08 14:16
Updated : 2026-02-10 14:49
NVD link : CVE-2026-2154
Mitre link : CVE-2026-2154
CVE.ORG link : CVE-2026-2154
JSON object : View
Products Affected
pamzey
- patients_waiting_area_queue_management_system