CVE-2026-19916 in Online Food Order System

Prediction

by VulDB Data Team • 08/15/2026

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file edit_food_items.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-390166
• CPE: ready
• CWE: CWE-79 (confirmed)
• Exploit: Download
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Police, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19916
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19916
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19916/