A vulnerability classified as problematic was found in SourceCodester Inventory System 1.0. Affected is an unknown function of the file view_purchase.php of the component Parameter Handler. Such manipulation of the argument limit leads to cross site scripting.

This vulnerability is referenced as CVE-2026-30568. It is possible to launch the attack remotely. No exploit is available.