https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T22:22:55.512873+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112096 CVE-2026-112096 — SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting 2026-10-23T22:22:55.514583+00:00

Affected: SourceCodester Inventory System

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.