Security Advisory

CVE-2026-3766

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-08 20:02:11
Last updated 2026-03-10 20:41:38
Assigner VulDB
State PUBLISHED

Description

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.