CVE-2026-94033

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0

Description Cross site scripting (XSS) occurs in the User Management component within the file /drug recommender/Admin/add user. A remote attacker can execute this attack by manipulating the txtname, txtemail, or txtpassword variables. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations As a temporary workaround, restrict access to the /drug recommender/Admin/add user endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.