CVE-2026-30556 in SourceCodester Sales and Inventory System

Resumen (Inglés)

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

Responsable

MITRE

Reservar

2026-03-04

Divulgación

2026-03-30

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354203	SourceCodester Sales and Inventory System Parameter index.php secuencias de comandos en sitios cruzados	79	No está definido	No está definido	CVE-2026-30556