CVE-2026-30558

MEDIUM 6.1CVE-2026-30558 · Published 30/03/2026 · updated 17/06/2026

In short

CVE-2026-30558 is a MEDIUM (CVSS 6.1) vulnerability affecting sales and inventory system (ahsanriaz26gmailcom).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sales and inventory system ahsanriaz26gmailcom	`= 1.0`	No fix yet

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_customer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

meifukun/Web-Security-PoCs · Exploit

More vulnerabilities in sales and inventory system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sales and inventory system

ahsanriaz26gmailcom

= 1.0

No fix yet

Description

More vulnerabilities in sales and inventory system

See all →