CVE-2026-7390: SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7390?
CVE-2026-7390 is classified as a cross-site scripting (XSS) vulnerability with a medium severity level.
How do I fix CVE-2026-7390?
To fix CVE-2026-7390, input sanitization and output encoding should be implemented in the affected 'Customer' function.
Which software versions are affected by CVE-2026-7390?
CVE-2026-7390 affects version 1.0 of the SourceCodester Pharmacy Sales and Inventory System.
What type of vulnerability is CVE-2026-7390?
CVE-2026-7390 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Where is the vulnerable code located in CVE-2026-7390?
The vulnerable code related to CVE-2026-7390 is located in the /index.php file on the 'customer' page.