CVE-2026-30527: XSS
A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. When an administrator or user visits the Category list page (or any page where this category is rendered), the injected JavaScript executes immediately in their browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30527?
The severity of CVE-2026-30527 is medium, rated 5.4 on the CVSS scale.
What type of vulnerability is CVE-2026-30527?
CVE-2026-30527 is a Stored Cross-Site Scripting (XSS) vulnerability.
How can I exploit CVE-2026-30527?
CVE-2026-30527 can be exploited by injecting malicious scripts into the 'Category Name' field in the Category management module.
How do I fix CVE-2026-30527?
To fix CVE-2026-30527, ensure that user inputs are properly sanitized and validated before being processed by the application.
What software is affected by CVE-2026-30527?
CVE-2026-30527 affects the SourceCodester Online Food Ordering System v1.0.