A vulnerability was found in SourceCodester Online Food Ordering System 1.0.
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SourceCodester
- Product
- Online Food Ordering System
- CVSS v3.1
- 2.4 AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
- Weakness
- CWE-79, CWE-94
- NVD status
- Deferred
Why it ranks 2 (Routine)
- No intrinsic risk signals yet; rank reflects source class and recency only.
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.