CVE-2026-112097

LOW 3.5

SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

CVSS Score

3.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is possible to launch the attack remotely.

CWE	CWE-79 CWE-94
Vendor	sourcecodester
Product	inventory system
Published	Oct 19, 2026

Stay Ahead of the Next One

Get instant alerts for sourcecodester inventory system

Be the first to know when new low vulnerabilities affecting sourcecodester inventory system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SourceCodester / Inventory System

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/421921 vuldb.com: https://vuldb.com/vuln/421921/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112097 vuldb.com: https://vuldb.com/submit/1012175 github.com: https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-03-XSS-sales.md sourcecodester.com: https://www.sourcecodester.com/

Credits

🔍 Muhannad AlSaif (VulDB User)