CVE-2026-30567

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0

Description Reflected Cross-Site Scripting (XSS) occurs when an application includes untrusted data in a web page without proper validation or encoding. In this case, the application fails to sanitize input in the 'view product.php' endpoint via the limit parameter, allowing remote attackers to inject arbitrary HTML or web scripts through a crafted URL.

Recommendations Update SourceCodester Sales and Inventory System version 1.0 to a version where this issue is resolved. As a temporary workaround, avoid using the limit parameter in the 'view product.php' endpoint until the issue is resolved.