PT-2026-137375

CVE-2026-122190

·

Published

2026-11-05

·

Updated

2026-11-05

Description by

CVSS 2.0
3.3
Low
MetricsAV:N/AC:L/Au:M/C:N/I:P/A:N
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add category.php of the component Category Management. Performing a manipulation of the argument category title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2026-122190
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com