Descrição
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used.
CVSS 3.5EPSS 0.203%Risco 0.36
Ver fonte- Publicação
- 2026-06-01 11:16:23
- Versões afetadas
- ==1.0
- Tipo
- Package
- Última alteração
- 2026-07-22 07:10:00
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N