CVE-2026-112097Low· 3.5▾ SunlitA vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the ar…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 19.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is possible to launch the attack remotely.
inventory_system 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112096Low· 3.5SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting
CVE-2026-112095Low· 3.5SourceCodester Inventory System Product Management products_handler.php save cross site scripting
CVE-2026-108920Medium· 4.3A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0
CVE-2026-108919Medium· 4.3A weakness has been identified in SourceCodester Drug Recommendation System 1.0
CVE-2026-105808Low· 3.5A vulnerability was determined in SourceCodester Simple Student Information System 1.0
CVE-2026-105809Medium· 4.3A vulnerability was identified in SourceCodester Simple Student Information System 1.0