Is CVE-2026-108919 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108919?

CVE-2026-108919 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-108919

Description

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious_school causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.