PT-2026-83712 · Code Projects · Simple Inventory System

·

CVE-2026-82625

·

Published

2026-08-31

·

Updated

2026-08-31

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions code-projects Simple Inventory System version 1.0
Description A cross site scripting issue exists in the User Registration component within the '/register.php' endpoint. A remote attacker can exploit this by manipulating the last name variable, allowing the execution of malicious scripts in the victim's browser.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-82625

Affected Products

Simple Inventory System