Medium · 6.1 CVE-2026-36324 EUVD-2026-33447GHSA-3ppc-465m-hp4q

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in…

Published May 29, 2026 · Updated Jun 1, 2026 · Assigned by mitre

Description

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in the user registration functionality in register.php.

References

https://www.sourcecodester.com/php/18453/doctor-appointment-system-using-php-and-mysql-source-code.html
https://github.com/adhiyaksactf/MyCVE-Disclosures/blob/main/rems-DoctorAppointmentSystem/CVE-2026-36324/README.md