CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the SourceCodester Drug Recommendation System 1.0, specifically within the /drug_recommender/Admin/add_symptom function, where manipulation of the txtname argument can lead to remote exploitation. Although the severity is rated low, organizations using this system should prioritize patching this flaw to mitigate potential attacks, especially since exploit code is publicly available. Users of this software should assess their exposure and implement necessary security measures promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.