CVE-2026-3170

CVE-2026-3170 affects SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0; vulnerability located in an unknown function of /patient-search.php. Manipulation of First Name/Last Name can trigger cross-site scripting, with remote attack capability and a public exploit refe...

PT-2026-21886

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

CVE-2026-1146 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting

A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...

PT-2025-49511

Name of the Vulnerable Software and Affected Versions SourceCodester Online Banking System version 1.0 Description A security issue exists in SourceCodester Online Banking System version 1.0. The manipulation of the First Name/Last Name argument in the /page=user file can lead to cross site...

CVE-2025-14221: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-60318

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the fname First Name and lname Last Name fields...

PT-2024-35951 · Unknown · Oretnom23 Online Car Wash Booking System

Name of the Vulnerable Software and Affected Versions: oretnom23 Online Car Wash Booking System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file "/admin/?page=user/list". The manipulation of the argument First Name/Last Name with the...

PT-2023-32915 · Unknown · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A vulnerability was found in the component Add Engineer Handler of the SourceCodester Engineers Online Portal. The manipulation of the argument first name/last name with the inpu...

Joget 跨站脚本漏洞

Joget is an open source no-code/low-code application platform from Joget Open Source. For faster and simpler digital conversion DX. Joget versions prior to 7.0.34 cross-site scripting vulnerability , the vulnerability stems from the file...

CVE-2022-34991

Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the firstname and lastname parameters...

PHP Scripts Mall Car Rental Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Car Rental Script is a set of car rental website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Car Rental Script version 2.0.8. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...