A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /checkin.php. This manipulation of the argument patient_id causes cross site scripting.

This vulnerability is handled as CVE-2026-2150. The attack can be initiated remotely. Additionally, an exploit exists.