CVE-2026-4899
code-projects Online Food Ordering System food.php cross site scripting
CVSS Score
2.4
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in code-projects Online Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /dbfood/food.php. The manipulation of the argument cuisines results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
| CWE | CWE-79 CWE-94 |
| Vendor | code-projects |
| Product | online food ordering system |
| Published | Mar 26, 2026 |
| Last Updated | Mar 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for code-projects online food ordering system
Be the first to know when new low vulnerabilities affecting code-projects online food ordering system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
code-projects / Online Food Ordering System
1.0
References
vuldb.com: https://vuldb.com/?id.353641 vuldb.com: https://vuldb.com/?ctiid.353641 vuldb.com: https://vuldb.com/?submit.776444 github.com: https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Online%20Food%20Ordering%20System%20in%20PHP%20cuisines%20Parameter.md code-projects.org: https://code-projects.org/
Credits
🔍 AhmadMarzook (VulDB User)