CVE-2026-4898

Publication date

2026-03-26 21:08:06

Family

VulDB

State

PUBLISHED

Description

A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.