PT-2026-42984 · Sourcecodester · Indian Invoicing System

C4Ttr4Ck · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9413

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-9413

Affected Products

Indian Invoicing System

References · 5

• 🔥 https://gist.github.com/c4ttr4ck/cb6a07bc54600a14de2676d8b96c3026 · Exploit
• https://vuldb.com/vuln/365394 · Note
• https://vuldb.com/vuln/365394/cti · Note
• https://vuldb.com/submit/813609 · Note
• https://sourcecodester.com · Note