Low severity2.4NVD Advisory· Published Sep 20, 2026

CVE-2026-94016

Description

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Patches

Vulnerability mechanics

References

github.com/KaranParelkar/Drug_recommendation_system/blob/main/xss/add_symptom/Readme.mdnvd
vuldb.com/cve/CVE-2026-94016nvd
vuldb.com/submit/944874nvd
vuldb.com/vuln/407956nvd
vuldb.com/vuln/407956/ctinvd
www.sourcecodester.comnvd

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000