CVE-2026-4899: code-projects Online Food Ordering System food.php cross site scripting
A security flaw has been discovered in code-projects Online Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /dbfood/food.php. The manipulation of the argument cuisines results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4899?
CVE-2026-4899 has a medium severity level due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2026-4899?
To fix CVE-2026-4899, validate and sanitize user inputs in the food.php file to mitigate XSS risks.
Which software is affected by CVE-2026-4899?
CVE-2026-4899 affects version 1.0 of the Code-Projects Online Food Ordering System.
What type of vulnerability is CVE-2026-4899?
CVE-2026-4899 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2026-4899 be exploited remotely?
Yes, CVE-2026-4899 can be exploited remotely if an attacker manipulates the cuisines argument in the food.php file.