CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Score

CVSS 4.0 4.8 Medium

Status

Deferred - cna@vuldb.com

Published

2026-06-08

Last modified

2026-06-09

Weaknesses

CWE-79, CWE-94

Affected products

• Hospitals Patient Records Management System (Sourcecodester)

References

• https://github.com/jqr1449186277/CVE/issues/2
• https://vuldb.com/cve/CVE-2026-11468
• https://vuldb.com/submit/833776
• https://vuldb.com/vuln/369088
• https://vuldb.com/vuln/369088/cti
• https://www.sourcecodester.com/