CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

  • Published Sep 20, 2026
  • CVSS 2.1 low
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-94035 at the National Vulnerability Database