https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:48:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278127 EUVD-2026-278127 https://cve.radiocsirt.org/vuln/euvd-2026-278127 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30563 <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the &#34;website&#34; parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the &#34;website&#34; parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30563 https://cve.radiocsirt.org/vuln/ghsa-9xmr-r5f9-5hvx <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the &#34;website&#34; parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the &#34;website&#34; parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.</p> https://cve.radiocsirt.org/vuln/ghsa-9xmr-r5f9-5hvx