PT-2026-53266 · Sourcecodester · Inventory Management System

Ayush8816 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13570

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full name results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-13570

Affected Products

Inventory Management System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-13570 · Security Note
• https://vuldb.com/vuln/374578/cti · Note
• https://vuldb.com/cve/CVE-2026-13570 · Note
• https://vuldb.com/submit/844353 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/374578 · Note