CVE-2026-30561

SourceCodester Sales and Inventory System 1.0 is affected by CVE-2026-30561, a reflected XSS in add_purchase.php via the msg parameter. The input is not sanitized, allowing an attacker to craft a URL that injects arbitrary script or HTML. The vulnerability is typified as NETWORK-accessible with u...