LOW 2.0 NVD
CVE-2026-112096
A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=
A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
- https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-02-XSS-purch
- https://vuldb.com/cve/CVE-2026-112096
- https://vuldb.com/submit/1012166
- https://vuldb.com/vuln/421920
- https://vuldb.com/vuln/421920/cti
This low severity vulnerability with a CVSS score of 2.0 was published on 2026-10-19 via NVD.
vulnfeed aggregates 17512 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.