Security Advisory

CVE-2026-14692

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-05 02:00:08
Last updated 2026-07-06 13:40:56
Assigner VulDB
CVSS score 5.3
State PUBLISHED

Description

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.