PT-2026-29032 · Sourcecodester · Sales/Inventory System
CVE-2026-30565
·
Publicado
2026-03-30
·
Atualizado
2026-03-30
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Sales and Inventory System version 1.0
Description
A Reflected Cross-Site Scripting (XSS) issue exists in the application. The issue is located in the
view supplier.php file through the limit parameter. The application does not properly sanitize input, which allows remote attackers to inject arbitrary web script or HTML via a crafted URL.Recommendations
Apply input sanitization to the
limit parameter in the view supplier.php file.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sales/Inventory System