Threats tagged 'ghsa-3h5f-583p-w5vj'

SourceCodester Pharmacy Sales and Inventory System 1.0 contains a cross-site scripting (XSS) vulnerability in the /index.php?page=users component. This flaw allows remote attackers with high privileges to manipulate the 'Name' parameter, potentially leading to limited impact XSS attacks. The vulnerability has a low CVSS score of 2.4 and requires user interaction and elevated privileges to exploit. Public exploit code is available.