Threats affecting pkg:github/karanparelkar/Drug_recommendation_system

CVE-2026-94033 is a cross-site scripting (XSS) vulnerability in SourceCodester Drug Recommendation System version 1.0. It affects the User Management component, specifically the /drug_recommender/Admin/add_user file. The vulnerability arises from improper handling of input parameters txtname, txtemail, and txtpassword, allowing remote attackers to inject malicious scripts. The vulnerability has a medium severity score and public exploit details have been disclosed.

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made public and could be used.