CVE-2026-112096

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

CVE-2026-112096

The SourceCodester Inventory System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Purchase Records Handler component. Specifically, the file /api/transactions_handler.php?action=save_purchase fails to properly neutralize input in the Product_Name , Product_Code , and Vendor_N...

EUVD-2026-104123

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...