4.3Orta
CVE-2025-12298code-projects Simple Food Ordering System editcategory.php cross site scripting
Açıklama
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the file /editcategory.php. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| code-projects | Simple Food Ordering System | 1.0 | |
| fabian | simple food ordering system | 1.0 |
Kaynaklar ve yamalar
- VDB-329970 | code-projects Simple Food Ordering System editcategory.php cross site scripting vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-329970 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- Submit #675998 | Code-projects Food Ordering System 1.0 Cross Site Scripting third-party-advisoryThird Party AdvisoryVDB Entry
- https://github.com/underatted/CVE/issues/19 exploitissue-trackingExploitThird Party Advisory
- https://code-projects.org/ productProduct
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:fabian:simple_food_ordering_system:1.0:*:*:*:*:*:*:*