CVE-2026-113741: itsourcecode Online Cake Ordering System 404.php cross site scripting
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker can exploit it remotely by manipulating the useruid argument sent to /404.php. No privileges are required, but exploitation requires user interaction.
Which deployments are affected?
The affected product identified is itsourcecode Online Cake Ordering System version 1.0. The vulnerable functionality is in /404.php; the available data does not identify configuration-dependent prerequisites.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.