PT-2026-45393 · Sourcecodester · Pharmacy Sales/Inventory System

Timeflies · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10247

Mitre

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the function create generic name of the file /ShowForm/create generic name/main. The manipulation of the argument generic name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-10247

Affected Products

Pharmacy Sales/Inventory System

References · 7

• 🔥 https://github.com/timeflies123/cve/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10247 · Security Note
• https://vuldb.com/cve/CVE-2026-10247 · Note
• https://vuldb.com/submit/823943 · Note
• https://vuldb.com/vuln/367525/cti · Note
• https://vuldb.com/vuln/367525 · Note
• https://sourcecodester.com · Note