Is CVE-2026-112096 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112096?

CVE-2026-112096 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-112096

Description

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.