PT-2026-29032 · Sourcecodester · Sales/Inventory System
CVE-2026-30565
·
Published
2026-03-30
·
Updated
2026-03-30
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Sales and Inventory System version 1.0
Description
A Reflected Cross-Site Scripting (XSS) issue exists in the application. The issue is located in the
view supplier.php file through the limit parameter. The application does not properly sanitize input, which allows remote attackers to inject arbitrary web script or HTML via a crafted URL.Recommendations
Apply input sanitization to the
limit parameter in the view supplier.php file.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sales/Inventory System