PT-2026-45392 · Sourcecodester · Pharmacy Sales/Inventory System

Timeflies · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10246

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0

Description Cross site scripting can be triggered remotely through the manipulation of the medicine presentation argument within the create medicine presentation() function located in the /ShowForm/create medicine presentation/main file.

Recommendations As a temporary workaround, restrict access to the create medicine presentation() function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-10246

Affected Products

Pharmacy Sales/Inventory System

References · 8

• 🔥 https://github.com/timeflies123/cve/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10246 · Security Note
• https://vuldb.com/submit/823941 · Note
• https://vuldb.com/cve/CVE-2026-10246 · Note
• https://vuldb.com/vuln/367524/cti · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/367524 · Note
• https://t.me/CVEtracker/55473 · Telegram Post