CVE-2026-127284
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.