CVE-2026-19916

Name of the Vulnerable Software and Affected Versions code-projects Online Food Order System version 1.0

Description An issue exists in the edit food items.php file where manipulating the dname argument allows for cross-site scripting (XSS), a technique used to inject malicious scripts into web pages viewed by other users. This flaw enables remote exploitation.

Recommendations As a temporary workaround, restrict access to the edit food items.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.