CVE-2026-94016

A cross-site scripting (XSS) flaw was identified in SourceCodester Drug Recommendation System 1.0 , specifically in the /drug_recommender/Admin/add_symptom endpoint. Manipulating the txtname parameter allows an authenticated remote attacker to inject and execute arbitrary script content, resultin...