CVE-2026-7200: SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7200?
CVE-2026-7200 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-7200?
To fix CVE-2026-7200, sanitize input parameters in index.php to prevent script injection.
What systems are affected by CVE-2026-7200?
CVE-2026-7200 affects version 1.0 of the SourceCodester Pharmacy Sales and Inventory System.
What type of vulnerability is CVE-2026-7200?
CVE-2026-7200 is a cross-site scripting (XSS) vulnerability.
Can CVE-2026-7200 lead to data leakage?
Yes, CVE-2026-7200 can potentially lead to data leakage or unauthorized actions due to the exploitation of XSS.