CVE-2026-5181
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Mar 31, 2026
Vendor
unknown
Description
A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.