Description
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used.
CVSS 3.5EPSS 0.203%Risque 0.36
Voir la source- Publication
- 2026-06-01 11:16:23
- Versions concernées
- ==1.0
- Type
- Package
- Dernière modification
- 2026-07-22 07:10:00
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N