CVE-2026-5157 in code-projects Online Food Ordering System
摘要 (英语)
A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument cust_id leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used.
披露
2026-03-31
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354189 | code-projects Online Food Ordering System Order order.php 跨网站脚本 | 79 | 概念验证 | 未定义 | CVE-2026-5157 |