CVE-2025-3821

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0

Description A vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. This issue affects the file add-admin.php and is related to the manipulation of the arguments txtpassword, txtfullname, and txtemail, which leads to cross-site scripting. The attack can be initiated remotely.

Recommendations For version 1.0, consider disabling the add-admin.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the arguments txtpassword, txtfullname, and txtemail in the affected file to minimize the risk of exploitation.