What is GHSA-63xw-cmj4-rvfq?

GHSA-63xw-cmj4-rvfq is a security advisory published by GitHub Security Advisories with Medium severity. A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0....

Which CVE IDs does GHSA-63xw-cmj4-rvfq cover?

GHSA-63xw-cmj4-rvfq covers the following CVE IDs: CVE-2026-14695. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-63xw-cmj4-rvfq?

GHSA-63xw-cmj4-rvfq has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-63xw-cmj4-rvfqMediumCVSS 7.3

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0....

Vendor

GitHub Security Advisories

Published

July 5, 2026

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-14695 →

📋 Description

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2026-14695
https://github.com/lee945/cve/issues/6
https://vuldb.com/cve/CVE-2026-14695
https://vuldb.com/submit/846835
https://vuldb.com/vuln/376291
https://vuldb.com/vuln/376291/cti
https://www.sourcecodester.com
https://github.com/advisories/GHSA-63xw-cmj4-rvfq