Medium · 6.1 CVE-2025-65215 EUVD-2025-200293GHSA-fmhp-h5cw-2625

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product_expiry/add-supplie…

Published Dec 2, 2025 · Updated Dec 2, 2025 · Assigned by mitre

Description

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product_expiry/add-supplier.php via the Supplier Name field.

References

https://www.linkedin.com/in/vabna-lina-24ab17186/
https://github.com/vabnamoni/CVE-Researches/blob/main/CVE-2025-65215