PT-2026-29031 · Sourcecodester · Sales/Inventory System

Meifukun · Publicado 2026-03-30 · Atualizado 2026-03-30 · CVE-2026-30564

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0

Description A Reflected Cross-Site Scripting (XSS) issue exists. The application does not properly sanitize input, potentially allowing remote attackers to inject arbitrary web scripts or HTML through a specially crafted URL. The issue is located in the view payments.php file via the limit parameter.

Recommendations Apply input sanitization to the limit parameter in the view payments.php file.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30564

Produtos afetados

Sales/Inventory System

Referências · 2

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/XSS-ViewPayments-limit.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30564 · Nota de Segurança