PT-2026-35561 · Sourcecodester · Pharmacy Sales/Inventory System

Zhuque · Published 2026-04-27 · Updated 2026-04-28 · CVE-2026-7200

NVD

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:N/I:P/A:N

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-7200

Affected Products

Pharmacy Sales/Inventory System

References · 6

• 🔥 https://github.com/3436567162/vlun/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7200 · Security Note
• https://vuldb.com/vuln/359801/cti · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/359801 · Note
• https://vuldb.com/submit/801111 · Note