PT-2025-48737 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-65215

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Web-based Pharmacy Product Management System version 1.0

Description The software is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the '/product expiry/add-supplier.php' file, specifically through the Supplier Name field. An attacker could potentially inject malicious scripts into the application via this field.

Recommendations Apply input validation and output encoding to the Supplier Name field in the '/product expiry/add-supplier.php' file.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-65215

Affected Products

Sourcecodester Web-Based Pharmacy Product Management System

References · 6

• 🔥 https://github.com/vabnamoni/CVE-Researches/blob/main/CVE-2025-65215 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65215 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65215 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1995950079413244094 · Twitter Post
• https://twitter.com/CVEnew/status/1995915023848292769 · Twitter Post
• https://linkedin.com/in/vabna-lina-24ab17186 · Note