SourceCodester Web-Based Pharmacy Product Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Web-Based Pharmacy Product Management System version 1.0. The issue arises in the add-stock.php file, where an unknown function improperly handles the txttotalcost, txtproductID, txtprice, and txtexpirydate arguments. This flaw allows remote attackers to inject malicious scripts, which could be executed in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.