PT-2026-43327 · Sourcecodester+1 · Hospital'S Patient Records Management System

Alaner

·

CVE-2026-9564

·

Published

2026-05-26

·

Updated

2026-05-26

CVSS v2.0

3.3

Low

VectorAV:N/AC:L/Au:M/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions SourceCodester/oretnom23 Hospitals Patient Records Management System version 1.0
Description Remote exploitation is possible through cross site scripting (XSS), a technique where malicious scripts are injected into trusted websites. The issue occurs in the /admin/?page=patients/view patient endpoint when manipulating the Remarks variable.
Recommendations Update SourceCodester/oretnom23 Hospitals Patient Records Management System version 1.0 to a version that contains a fix, or avoid using the Remarks variable in the /admin/?page=patients/view patient endpoint until the issue is resolved.

Exploit

Fix

Code Injection

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94CWE-79

Related Identifiers

CVE-2026-9564

Affected Products

Hospital'S Patient Records Management System