Sourcecodester Inventory System vulnerabilities

3 CVEs affecting Sourcecodester Inventory System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11520, published 2026-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-11518, published 2026-06-08. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument…
CVE-2026-11519, published 2026-06-08. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_handler.php of the…
CVE-2026-11520, published 2026-06-08. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It…