Free and Open Source Inventory Management System
15 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Free and Open Source Inventory Management System, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
Free and Open Source Inventory Management System CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 15 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Medium14
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Free and Open Source Inventory Management System.
- CVE-2024-9323SourceCodester Inventory Management System add_staff.php cross site scripting3.5
- CVE-2024-1926SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection6.3
- CVE-2023-51813Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.ph...6.5
- CVE-2023-7157SourceCodester Free and Open Source Inventory Management System sell_return_data.php sql injection6.3
- CVE-2023-7155SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection6.3
- CVE-2023-6306SourceCodester Free and Open Source Inventory Management System member_data.php sql injection6.3
- CVE-2023-6305SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection6.3
- CVE-2023-39712Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...6.1
- CVE-2023-39711Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...6.1
- CVE-2023-39714Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...6.1
- CVE-2023-39710Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...6.1
- CVE-2023-39709Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...6.1
- CVE-2023-39708A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload ...6.1
- CVE-2023-39707A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload ...5.4
- CVE-2023-4449SourceCodester Free and Open Source Inventory Management System sql injection6.3
Product grouping is registry-driven, with AI assist and human review. How it works