| Package | Affected versions | Patched versions |
|---|---|---|
| web-based pharmacy product management system | = 1.0 |
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free