CVE-2026-30567 in Inventory System
Сводка (Английский)
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1.0 in the view_product.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Ответственный
MITRE
Резервировать
04.03.2026
Раскрытие
27.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 353993 | SourceCodester Inventory System Parameter view_product.php межсайтовый скриптинг | 79 | Не определено | Не определено | CVE-2026-30567 |