CVE-2026-3302Disclosure(remyandrade / doctor_appointment_system)

LOWCVSS 6.1 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign Up Page. Executing a manipulation of the argument Email can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • doctor_appointment_system

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Products
doctor_appointment_system

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-27: 3Technical Details · 2026-02-27: 202-27
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3302 Cross-Site Scripting in SourceCodester Doctor Appointment System via Email Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3302

    Post summary

    The text announces an XSS vulnerability (CVE‑2026‑3302) in the SourceCodester Doctor Appointment System, with no evidence of active exploitation, PoC, or patch information.

    0000045
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3302 A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the co… https://www.cve.org/CVERecord?id=CVE-2026-3302

    Post summary

    CVE‑2026‑3302 is reported as a weakness in SourceCodester Doctor Appointment System 1.0 affecting /register.php. No proof of concept, exploit, active use, patch, or technical details are provided.

    00000155
    56.6K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3302 - SourceCodester Doctor Appointment System Sign Up register.php cross site scripting Intel Report: https://ift.tt/o2XldtI

    Post summary

    The alert announces CVE‑2026‑3302, a cross‑site scripting flaw in SourceCodester Doctor Appointment System’s register.php, without providing PoC details, exploit code, active exploitation evidence, or patch information.

    000005
    341 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appremyandradedoctor_appointment_system1.0--

Explore more