CVE-2026-4898: code-projects Online Food Ordering System contact.php cross site scripting
A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4898?
CVE-2026-4898 is classified as a cross-site scripting (XSS) vulnerability, which can be exploited to execute arbitrary scripts in the user's browser.
How do I fix CVE-2026-4898?
To mitigate CVE-2026-4898, sanitize and validate user inputs in the contact.php file to prevent malicious scripts from being executed.
What is affected by CVE-2026-4898?
CVE-2026-4898 affects version 1.0 of the code-projects Online Food Ordering System specifically in the contact.php file.
Can CVE-2026-4898 lead to data theft?
Yes, if exploited, CVE-2026-4898 can potentially allow attackers to steal sensitive information by executing malicious scripts in the context of the user's session.
How can I tell if my system is vulnerable to CVE-2026-4898?
Systems running code-projects Online Food Ordering System version 1.0 should be considered vulnerable if user inputs are not properly sanitized in the contact.php file.