PT-2026-45393 · Sourcecodester · Pharmacy Sales/Inventory System

Timeflies · CVE-2026-10247 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0

Description Cross site scripting occurs via the manipulation of the generic name argument within the create generic name() function located in the /ShowForm/create generic name/main file. This issue allows for remote attacks.

Recommendations Update SourceCodester Pharmacy Sales and Inventory System version 1.0 to a version that contains a fix. As a temporary workaround, restrict access to the create generic name() function until a patch is applied.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-10247

Affected Products

Pharmacy Sales/Inventory System

References · 8

• 🔥 https://github.com/timeflies123/cve/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10247 · Security Note
• https://vuldb.com/vuln/367525/cti · Note
• https://t.me/CVEtracker/55474 · Telegram Post
• https://sourcecodester.com · Note
• https://vuldb.com/cve/CVE-2026-10247 · Note
• https://vuldb.com/submit/823943 · Note
• https://vuldb.com/vuln/367525 · Note