Low severity3.5NVD Advisory· Published Sep 7, 2026

CVE-2026-86301

Description

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Code Projects/Hospital Information Systemllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

code-projects.orgnvd
github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Reflected%20Cross-Site%20Scripting%20(XSS)%20in%20Hospital%20Information%20System%20%60id%60%20Parameter.mdnvd
vuldb.com/cve/CVE-2026-86301nvd
vuldb.com/submit/906740nvd
vuldb.com/vuln/399465nvd
vuldb.com/vuln/399465/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000