This vulnerability in SourceCodester Pharmacy Product Management System 1.0 arises from improper handling of the 'txtqty' POST parameter in the add-sales.php file, leading to business logic errors. An attacker can remotely manipulate this parameter to cause unintended behavior in the sales processing logic. The CVSS 4.0 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no user interaction required, and limited privileges needed. No official fix or patch is currently available, and the vendor has not issued remediation instructions.

Exploitation of this vulnerability may allow an attacker to manipulate business logic related to sales quantity processing, potentially causing incorrect sales records or inventory mismanagement. The exact impact depends on how the application uses the 'txtqty' parameter, but it does not directly lead to system compromise or data disclosure based on available information. No confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing input validation and business logic checks on the 'txtqty' parameter to mitigate potential abuse. Monitoring application behavior for anomalies related to sales quantity processing is advisable.