Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-10245

SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting

Description

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Pharmacy Sales and Inventory System

  • 1.0affected

References