Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3170 Cross-Site Scripting in Patients Waiting Area Queue Management System 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3170
Post summary
A Cross‑Site Scripting vulnerability (CVE‑2026‑3170) was disclosed for Patients Waiting Area Queue Management System 1.0, with no evidence of exploitation, PoC, or patch information provided.
CVE-2026-3170 A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-sea… https://www.cve.org/CVERecord?id=CVE-2026-3170
Post summary
A CVE-2026-3170 vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0, affecting an unknown function in the /patient-sea file, with no further details or mitigation provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pamzey | patients_waiting_area_queue_management_system | 1.0 | - | - |