Beveiligingsadvies

CVE-2026-30563

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-30 00:00:00

Laatst bijgewerkt 2026-03-30 15:28:43

Toegewezen door mitre

CVSS-score 6.1

Status PUBLISHED

Beschrijving

A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the "website" parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.

← Alle CVE's bekijken Bekijk op cve.org ↗