PT-2026-45391 · Sourcecodester · Pharmacy Sales/Inventory System

Timeflies · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10245

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0

Description A flaw in the create supplier() function within the /ShowForm/create supplier/main file allows for remote cross-site scripting. This occurs when the company name argument is manipulated, enabling an attacker to execute malicious scripts in the victim's browser.

Recommendations Update SourceCodester Pharmacy Sales and Inventory System version 1.0 to a patched version. As a temporary workaround, restrict access to the create supplier() function until a fix is applied.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-10245

Affected Products

Pharmacy Sales/Inventory System

References · 8

• 🔥 https://github.com/timeflies123/cve/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10245 · Security Note
• https://vuldb.com/cve/CVE-2026-10245 · Note
• https://vuldb.com/vuln/367523 · Note
• https://vuldb.com/submit/823937 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/367523/cti · Note
• https://t.me/CVEtracker/55472 · Telegram Post