PT-2026-28412 · Ahsanriaz26Gmailcom · Inventorysystem

Published 2026-03-27 · Updated 2026-03-27 · CVE-2026-30571

Mitre

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view category.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-30571

Affected Products

Inventorysystem

References · 2

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/XSS-ViewCategory-limit.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30571 · Security Note