CVE-2026-116603
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Oct 27, 2026
Vendor
unknown
Description
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.