CVE-2026-2154 | SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Patient Registration /registration.php First Name cross site scripting

A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. It has been rated as problematic. Impacted is an unknown function of the file /registration.php of the component Patient Registration Module. The manipulation of the argument First Name leads to cross site scripting.

This vulnerability is referenced as CVE-2026-2154. Remote exploitation of the attack is possible. Furthermore, an exploit is available.