Sales and inventory system

This hub aggregates every CVE we track for Sales and inventory system, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Sales and inventory system.

• CVE-2026-78656itsourcecode Sales and Inventory System cust_del.php sql injection6.3Aug 25, 2026
• CVE-2026-78185itsourcecode Sales and Inventory System cust_edit.php sql injection6.3Aug 24, 2026
• CVE-2026-78171itsourcecode Sales and Inventory System processlogin.php sql injection7.3Aug 24, 2026
• CVE-2026-5810SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting3.5Apr 8, 2026
• CVE-2026-30565A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_supplier.php file via the "limit" parameter. T...6.1Mar 30, 2026
• CVE-2026-30563A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sani...6.1Mar 30, 2026
• CVE-2026-30558A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_customer.php file via the "msg" parameter. The ...6.1Mar 30, 2026
• CVE-2026-30561A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_purchase.php file via the "msg" parameter. The ...6.1Mar 30, 2026
• CVE-2026-30559A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_sales.php file via the "msg" parameter. The app...6.1Mar 30, 2026
• CVE-2026-30556A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The applica...6.1Mar 30, 2026
• CVE-2026-30564A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_payments.php file via the "limit" parameter. T...6.1Mar 30, 2026
• CVE-2026-30557A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_category.php file via the "msg" parameter. The ...6.1Mar 30, 2026
• CVE-2026-30562A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_stock.php file via the "msg" parameter. The app...9.3Mar 30, 2026
• CVE-2026-30566A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_customers.php file via the "limit" parameter. ...6.1Mar 30, 2026
• CVE-2026-30560A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_supplier.php file via the "msg" parameter. The ...6.1Mar 30, 2026