CVE-2026-7282
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Apr 28, 2026
Vendor
unknown
Description
A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.