CVE-2025-3826: SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3826?
CVE-2025-3826 is classified as a problematic vulnerability affecting the SourceCodester Web-based Pharmacy Product Management System.
How do I fix CVE-2025-3826?
To fix CVE-2025-3826, sanitize and validate all user inputs to prevent cross-site scripting in the add-supplier.php file.
What type of vulnerability is CVE-2025-3826?
CVE-2025-3826 is a cross-site scripting (XSS) vulnerability.
Where is CVE-2025-3826 found in the affected software?
CVE-2025-3826 is found in the add-supplier.php file of the SourceCodester Web-based Pharmacy Product Management System.
Which arguments are affected by CVE-2025-3826?
The arguments txtsupplier_name and txtaddress in CVE-2025-3826 are susceptible to manipulation leading to XSS.