PT-2025-39999 · Sourcecodester · Web-Based Pharmacy Product Management System

Sourabhthakur2109 · Published 2025-09-30 · Updated 2025-12-23 · CVE-2025-56018

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0

Description The software is susceptible to Cross Site Scripting (XSS) within the Category Management feature, specifically through the category name field. This allows for potential malicious script injection.

Recommendations Apply input validation and sanitization to the category name field to prevent the execution of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56018

Affected Products

Web-Based Pharmacy Product Management System

References · 6

• 🔥 https://medium.com/@sourabhthakur2109/stored-cross-site-scripting-xss-in-sourcecodester-web-based-pharmacy-product-management-system-1e85d144079b · Exploit
• https://osv.dev/vulnerability/CVE-2025-56018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56018 · Security Note
• https://t.me/cveNotify/137642 · Telegram Post
• https://t.me/CVEtracker/33739 · Telegram Post
• https://twitter.com/CVEnew/status/2003567322338918530 · Twitter Post