CVE-2026-7282

CVE-2026-7282 affects SourceCodester Pharmacy Sales and Inventory System v1.0. The vulnerability lies in /ajax.php?action=delete_expired, where manipulating the ID parameter enables SQL injection. It can be exploited remotely via a network attack and requires high privileges with no user interact...