CVE-2025-12300: code-projects Simple Food Ordering System addcategory.php cross site scripting

Published Oct 27, 2025

Updated

A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Simple Food Ordering System

Fabian Simple Food Ordering System=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12300?

CVE-2025-12300 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-12300?

To fix CVE-2025-12300, sanitize and validate the input for the 'cname' argument in the /addcategory.php file to prevent cross-site scripting.

What types of systems are affected by CVE-2025-12300?

CVE-2025-12300 affects the Simple Food Ordering System version 1.0 developed by code-projects.

Can CVE-2025-12300 be exploited remotely?

Yes, CVE-2025-12300 can be exploited remotely by manipulating the 'cname' argument.

What is the impact of CVE-2025-12300?

The impact of CVE-2025-12300 is the execution of malicious scripts in the user's browser, leading to data theft or session hijacking.