CVE-2026-11468

LOW

SourceCodester Hospitals Patient Records Management System page room_types cross site scripting

Title source: cna
STIX 2.1

Description

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory
Submit #833776 | sourcecodester Hospital's Patient Records Management System V1.0 cross site scripting
https://vuldb.com/submit/833776
Exploit exploit issue-tracking
https://github.com/jqr1449186277/CVE/issues/2
Vdb Entry, Technical Description vdb-entry technical-description
VDB-369088 | SourceCodester Hospitals Patient Records Management System page room_types cross site scripting
https://vuldb.com/vuln/369088
Signature, Permissions Required signature permissions-required
VDB-369088 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/369088/cti
Third Party Advisory third-party-advisory
CVE-2026-11468 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-11468

Scores

CVSS v3 2.4
EPSS 0.0035
EPSS Percentile 26.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
SourceCodester/Hospitals Patient Records Management System 1.0
Published Jun 08, 2026
Tracked Since Jun 08, 2026