PT-2026-53266 · Sourcecodester · Inventory Management System

Ayush8816 · Publicado 2026-06-29 · Atualizado 2026-06-29 · CVE-2026-13570

NVD

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full name results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Correção

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-13570

Produtos afetados

Inventory Management System

Referências · 6

• https://vuldb.com/vuln/374578/cti · Nota
• https://vuldb.com/cve/CVE-2026-13570 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13570 · Nota de Segurança
• https://vuldb.com/submit/844353 · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/vuln/374578 · Nota