CVE-2026-94034 — SourceCodester Drug Recommendation System Password Change change_password cross site scripting
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the…
Published: 2026-09-20 · CVSS: 5.1 · CVSS 4.0
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7