CVE-2026-116605
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 27, 2026
Vendor
unknown
Description
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.