Sourcecodester · Pharmacy Sales/Inventory System · CVE-2026-10246
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Pharmacy Sales and Inventory System version 1.0
**Description**
Cross site scripting can be triggered remotely through the manipulation of the `medicine presentation` argument within the `create medicine presentation()` function located in the `/ShowForm/create medicine presentation/main` file.
**Recommendations**
As a temporary workaround, restrict access to the `create medicine presentation()` function until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.