CVE-2025-10837: code-projects Simple Food Ordering System order.php cross site scripting

Published Sep 23, 2025

Updated

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects Simple Food Ordering System

Fabian Simple Food Ordering System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·04:02 AM

Data Sourced

via MITRE·04:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10837?

CVE-2025-10837 is classified as a cross site scripting vulnerability, which can lead to serious security risks.

How do I fix CVE-2025-10837?

To fix CVE-2025-10837, ensure input validation and sanitization is implemented in the order.php file.

What systems are affected by CVE-2025-10837?

CVE-2025-10837 affects the Simple Food Ordering System version 1.0 developed by code-projects.

What type of attack is possible with CVE-2025-10837?

CVE-2025-10837 allows attackers to perform cross site scripting attacks by manipulating the ID argument.

When was CVE-2025-10837 published?

CVE-2025-10837 was published in 2025, detailing vulnerabilities in the Simple Food Ordering System.