CVE-2026-108919
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Oct 12, 2026
Vendor
unknown
Description
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious_school causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.