Threats affecting pkg:github/sourcecodester/pharmacy-product-management-system

CVE-2026-5812 is a medium severity vulnerability in SourceCodester Pharmacy Product Management System version 1.0. It involves a business logic error in the add-sales.php component, specifically in handling the POST parameter txtqty. This flaw allows remote attackers to manipulate the quantity parameter, potentially causing unintended business logic behavior. The vulnerability has a CVSS 4.0 base score of 5.3. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.