CVE-2026-30556

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-30556
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS

No CVSS.

References
Link Resource
https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/XSS-Index-msg.md
Configurations

No configuration.

History

30 Mar 2026, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-30 16:16

Updated : 2026-03-30 16:16

NVD link : CVE-2026-30556

Mitre link : CVE-2026-30556

CVE.ORG link : CVE-2026-30556

JSON object : View

Products Affected

No product.

CWE

No CWE.