CVE-2026-90599

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2

Description A flaw in the file includes/process.php allows for remote cross-site request forgery (CSRF), a type of attack that forces an authenticated user to execute unwanted actions on a web application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the file includes/process.php to minimize the risk of exploitation.