CVE-2026-8136— SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8136
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /index.php?page=users. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Pharmacy Sales and Inventory System | 1.0 | - |
II. Public POCs for CVE-2026-8136
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8136
Please Login to view more intelligence information
- Just a moment...third-party-advisory
- CVE-2026-8136 | SourceCodester Pharmacy Sales and Inventory System 1.0 /index.php?page=users Name cross site scriptingvdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2026-8136
Same Patch Batch · SourceCodester · 2026-05-08 · 6 CVEs total
| CVE-2026-8131 | 7.3 HIGH | SourceCodester SUP Online Shopping replymsg.php sql injection |
| CVE-2026-8130 | 7.3 HIGH | SourceCodester SUP Online Shopping message.php sql injection |
| CVE-2026-8129 | 7.3 HIGH | SourceCodester SUP Online Shopping wishlist.php sql injection |
| CVE-2026-8128 | 7.3 HIGH | SourceCodester SUP Online Shopping viewmsg.php sql injection |
| CVE-2026-8126 | 7.3 HIGH | SourceCodester Comment System post_comment.php sql injection |
IV. Related Vulnerabilities
Same product: Pharmacy Sales and Inventory System
- CVE-2026-8083
SourceCodester Pharmacy Sales and Inventory System ajax.php - CVE-2026-7550
SourceCodester Pharmacy Sales and Inventory System ajax.php - CVE-2026-7549
SourceCodester Pharmacy Sales and Inventory System ajax.php - CVE-2026-7392
SourceCodester Pharmacy Sales and Inventory System ajax.php - CVE-2026-7391
SourceCodester Pharmacy Sales and Inventory System ajax.php
Same vendor: SourceCodester
- CVE-2026-8131
SourceCodester SUP Online Shopping replymsg.php sql injectio - CVE-2026-8130
SourceCodester SUP Online Shopping message.php sql injection - CVE-2026-8129
SourceCodester SUP Online Shopping wishlist.php sql injectio - CVE-2026-8128
SourceCodester SUP Online Shopping viewmsg.php sql injection - CVE-2026-8126
SourceCodester Comment System post_comment.php sql injection
Same weakness: CWE-79
- CVE-2026-7475
Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-S - CVE-2026-7650
E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authentic - CVE-2026-5341
NMR Strava activities <= 1.0.14 - Authenticated (Contributor - CVE-2026-7330
Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross - CVE-2026-42150
wlc: print_html outputs API data without HTML escaping, enab
V. Comments for CVE-2026-8136
No comments yet