A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file edit_food_items.php. Performing a manipulation of the argument dname results in cross site scripting.
Remote exploitation of the attack is possible. The exploit is now public and may be used.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
code-projects:online food order system
References 6
https://vuldb.com/vuln/390166
VDB-390166 | code-projects Online Food Order System edit_food_items.php cross site scripting
https://vuldb.com/vuln/390166/cti
VDB-390166 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/cve/CVE-2026-19916
CVE-2026-19916 | CVE Analysis and Report
https://vuldb.com/submit/870863
Submit #870863 | ONLINE_FOOD_ORDER_SYSTEM - Stored XSS Vulnerability in edit_food_items.php v1 Stored XSS
https://github.com/zzzxc643/CVE1/blob/main/project1/vul6.md
NVD
https://code-projects.org/
NVD