CVE-2025-3824: SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproductname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3824?
CVE-2025-3824 has been classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-3824?
To fix CVE-2025-3824, sanitize and validate user inputs in the add-product.php file, particularly for the txtprice and txtproduct_name fields.
Which version of the software is affected by CVE-2025-3824?
CVE-2025-3824 affects version 1.0 of the SourceCodester Web-based Pharmacy Product Management System.
What type of vulnerability is CVE-2025-3824?
CVE-2025-3824 is a cross-site scripting (XSS) vulnerability that can lead to unauthorized script execution.
What is the impact of exploiting CVE-2025-3824?
Exploiting CVE-2025-3824 can allow attackers to execute arbitrary scripts in the context of a user's session, potentially stealing sensitive information.