PT-2026-35717 · Sourcecodester · Pharmacy Sales/Inventory System

Zulu · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7269

Mitre

CVSS v3.1

2.4

Low

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-7269

Affected Products

Pharmacy Sales/Inventory System

References · 7

• 🔥 https://github.com/zulu225588/zulu-loudong/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7269 · Security Note
• https://vuldb.com/vuln/359920/cti · Note
• https://vuldb.com/submit/802757 · Note
• https://vuldb.com/vuln/359920 · Note
• https://vuldb.com/submit/802758 · Note
• https://sourcecodester.com · Note