Cross-Site Scripting Vulnerability in SourceCodester Web-based Pharmacy Product Management System
CVE-2025-3823

4.8MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Web-based Pharmacy Product Management System
Vendor: CVE Published:; 20 April 2025

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-3823?

A significant cross-site scripting vulnerability exists in the add-stock.php file of the SourceCodester Web-based Pharmacy Product Management System. This security flaw arises from improper handling of parameters such as txttotalcost, txtproductID, txtprice, and txtexpirydate. Attackers can exploit this vulnerability remotely, potentially leading to the execution of malicious scripts in users' browsers. As the exploit is public, it poses a risk to any deployment of the affected software version.

Affected Version(s)

Web-based Pharmacy Product Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-3823 - Proof of Concept