CVE-2026-7200 in Pharmacy Sales and Inventory System

Sumário

de MITRE • 28/04/2026

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsável: VulDB
• Divulgação: 28/04/2026
• Moderação: aceite
• Entrada: VDB-359801
• CPE: pronto
• CWE: CWE-79 (confirmado)
• Exploração: Descarregar
• CVSS: 4.3 (VulDB)
• EPSS: 0.00039
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7200
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7200
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7200/