CVE-2026-30558

SourceCodester Sales and Inventory System 1.0 contains a reflected XSS in add_customer.php via the msg parameter. The input is not sanitized, allowing a crafted URL to inject arbitrary script/HTML. Impact is web-based script execution when the link is visited; exploitation details are not provide...

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...