CVE-2026-30561 | SourceCodester Sales and Inventory System 1.0 Parameter add_purchase.php msg cross site scripting

March 30, 2026 Yanac

A vulnerability identified as problematic has been detected in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file add_purchase.php of the component Parameter Handler. The manipulation of the argument msg leads to cross site scripting.

This vulnerability is traded as CVE-2026-30561. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More