A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the "website" parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
Updated vendor and product information, set severity to HIGH, and marked the vulnerability as actively exploited.
Initial creation
