CVE-2025-3824

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0

Description A problematic vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown functionality of the file add-product.php. The manipulation of the arguments txtprice and txtproduct name leads to cross-site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For SourceCodester Web-based Pharmacy Product Management System version 1.0, consider restricting access to the add-product.php file until a patch is available. As a temporary workaround, avoid using the arguments txtprice and txtproduct name in the affected file to minimize the risk of exploitation.