SourceCodester Inventory System header.php cross site scripting
CVE-2026-11520

5.1MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Inventory System
Vendor
CVE Published:
8 June 2026

What is CVE-2026-11520?

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Multiple parameters might be affected.

Affected Version(s)

Inventory System 1.0

References

https://vuldb.com/vuln/369140
vdb-entry
https://vuldb.com/vuln/369140/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-11520
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kamran Saifullah (VulDB User)
VulDB Vulnerability Moderation Team
.