Security Advisory

CVE-2026-11518

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-08 13:30:11
Last updated 2026-06-08 15:43:59
Assigner VulDB
CVSS score not scored
State PUBLISHED

Description

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.