CVE-2026-82554

Name of the Vulnerable Software and Affected Versions SourceCodester Queue Management System version 1.0

Description A flaw in the /api/add customer.php endpoint allows for remote cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites. This occurs through the manipulation of the Name argument.

Recommendations As a temporary workaround, avoid using the Name parameter in the /api/add customer.php endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.