← Database

CVE-2026-90696

LOW CVSS: 3.5 Published: 2026-09-14 Modified: 2026-09-14

Description

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the component Product Management Module. Executing a manipulation of the argument Product_Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Unknown

Weakness Type

CWE-79, CWE-94

References