CVE-2026-4898: falha de média gravidade em code-projects Online Food Ordering System
code-projects Online Food Ordering System contact.php cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Online Food Ordering SystemCVEs relacionadas — code-projects Online Food Ordering System
No mesmo produto, das mais perigosas para as menos.
CVE-2026-4900MEDIUMcode-projects Online Food Ordering System localhost.sql privilege escalationEPSS 0.4%CVE-2026-5157MEDIUMcode-projects Online Food Ordering System Order order.php cross site scriptingEPSS 0.3%CVE-2026-4844MEDIUMcode-projects Online Food Ordering System Admin Login admin.php sql injectionEPSS 0.3%CVE-2026-4899MEDIUMcode-projects Online Food Ordering System food.php cross site scriptingEPSS 0.3%CVE-2026-4841MEDIUMcode-projects Online Food Ordering System Shopping Cart cart.php sql injectionEPSS 0.3%