CVE-2021-29387: Equipment Inventory System Project Equipment Inventory System

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple stored cross-site scripting (XSS) vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any "Add" sections, such as Add Item , Employee and Position or others in the Name Parameters.

Affected products

• Equipment Inventory System Project Equipment Inventory System: version 1.0 only

Published 2021-04-28. Last modified 2026-06-17.