A vulnerability identified as problematic has been detected in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting.
This vulnerability was named CVE-2026-3766. The attack may be initiated remotely. In addition, an exploit is available.
