CVE-2026-2149 | SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 /appointments.php patient_id cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patient_id results in cross site scripting.

This vulnerability is known as CVE-2026-2149. It is possible to launch the attack remotely. Furthermore, an exploit is available.