CVE-2026-3171 - Vulnerability Analysis

Overview

SourceCodester Patrick Mvuma Patients Waiting Area Queue Management System 1.0 contains a stored XSS caused by improper sanitization of firstname/lastname arguments in /queue.php, letting remote attackers execute scripts, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version with proper input sanitization or apply patches to sanitize firstname/lastname inputs.

References

• https://gist.github.com/archana1122m/2aed32e2a7ca5a648105bfdffd72a955
• https://vuldb.com/?ctiid.347678
• https://vuldb.com/?id.347678
• https://vuldb.com/?submit.760189

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner