VULNERABILITY INTELLIGENCE

CVE-2026-30565

CVSS score6.1 MEDIUM

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-03-30

Last modified2026-06-17

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_supplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.