CVE-2026-94035

4.3 MEDIUMpublic exploit available

Published 2026-09-20 · Updated 2026-09-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses

CWE-79, CWE-94

Public exploit & PoC references

https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/xss/profile/Readme.md

All references

https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/xss/profile/Readme.md
https://vuldb.com/cve/CVE-2026-94035
https://vuldb.com/submit/946208
https://vuldb.com/vuln/407963
https://vuldb.com/vuln/407963/cti
https://www.sourcecodester.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2026-93956PoC
LOWCVE-2026-93975PoC
LOWCVE-2026-93976PoC
LOWCVE-2026-93977PoC
LOWCVE-2026-94016PoC
LOWCVE-2026-94033PoC
LOWCVE-2026-94034PoC
LOWCVE-2026-94045PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.