github.comexploit
https://github.com/csehacademy/CVEs/blob/main/Web-based%20Pharmacy%20Product%20Management%20System%20-%20Stored%20XSS.md CVE-2025-4547
MEDIUM
SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scripting
Record summary
CVE-2025-4547 has a selected CVSS score of 4.8 (medium).
Description
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 12, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Web-based Pharmacy Product Management SystemBrowse SourceCodester / Web-based Pharmacy Product Management System | CVE List | 1.0 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-4547 VDB-308294 | CTI Indicators (IOB, IOC, TTP)signaturepermissions required
https://vuldb.com/?ctiid.308294 VDB-308294 | SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scriptingvdb entry
https://vuldb.com/?id.308294 Submit #567497 | SourceCodester Web-based Pharmacy Product Management System 1.0 Cross Site ScriptingThird-party advisory
https://vuldb.com/?submit.567497 sourcecodester.comproduct
https://www.sourcecodester.com/