CVE-2026-112096

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions handler.php?action=save purchase of the component Purchase Records Handler. The manipulation of the argument Product Name/Product Code/Vendor Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.