Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3766 A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. P… https://www.cve.org/CVERecord?id=CVE-2026-3766
Post summary
The snippet announces the discovery of CVE‑2026‑3766 in a pharmacy product management system, but does not offer technical details, exploitation evidence, or remediation guidance.
CVE-2026-3766 Cross-Site Scripting in SourceCodester Pharmacy Management System 1.0 via Profile Edit https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3766
Post summary
The text announces a new cross‑site scripting vulnerability (CVE‑2026‑3766) affecting SourceCodester Pharmacy Management System 1.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | senior-walter | web-based_pharmacy_product_management_system | 1.0 | - | - |