CVE-2026-78059: SourceCodester Stock Management System printOrder.php cross site scripting
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /phpaction/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker can remotely manipulate the clientName or clientContact argument processed by /php_action/printOrder.php. Exploitation requires a user to interact with the resulting crafted content.
What is the likely impact of successful exploitation?
The reported impact is limited to integrity. This is a cross-site scripting issue, so attacker-supplied script may execute in the affected user's browser context.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.