CVE-2026-87926
Rizwan17 inventory-management-system Login Page index.php cross site scripting
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-79 CWE-94 |
| Vendor | rizwan17 |
| Product | inventory-management-system |
| Published | Sep 9, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for rizwan17 inventory-management-system
Be the first to know when new medium vulnerabilities affecting rizwan17 inventory-management-system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Rizwan17 / inventory-management-system
bfe78a330d01bb26b9daec5dc9ecd5c77900e03f
References
vuldb.com: https://vuldb.com/vuln/401813 vuldb.com: https://vuldb.com/vuln/401813/cti vuldb.com: https://vuldb.com/cve/CVE-2026-87926 vuldb.com: https://vuldb.com/submit/911140 github.com: https://github.com/Rizwan17/inventory-management-system/issues/11 github.com: https://github.com/Rizwan17/inventory-management-system/
Credits
🔍 cnluminous (VulDB User) VulDB CNA Team