← CVE Radar
CVE-2026-122190SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
4.8 MEDIUMEPSS 0.21%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 4.8 | MEDIUM | 4.0VulDB (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P |
| 1.9 | LOW | 4.0VulDB (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P |
| 2.4 | LOW | 3.1VulDB (CNA) | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
| 2.4 | LOW | 3.1VulDB (CNA) | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RC:R |
| 2.4 | LOW | 3.0VulDB (CNA) | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RC:R |
| 3.3 | LOW | 2.0VulDB (CNA) | AV:N/AC:L/Au:M/C:N/I:P/A:N |
| 3.3 | LOW | 2.0VulDB (CNA) | AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR |
Details
- CVE ID
- CVE-2026-122190
- Status
- Deferred
- Assigner (CNA)
- VulDB
- Published
- Nov 5, 2026
- Last modified
- 2026-11-05 21:18 UTC
Affected Products
As published by the CNA in the CVE record.
SourceCodesterOnline Food Ordering System1 version range
- 1.0
References
- gist.github.com https://gist.github.com/shamillshaanuh/f5e39643e1504536f55bf02bb51c3598
- vuldb.com https://vuldb.com/cve/CVE-2026-122190
- vuldb.com https://vuldb.com/submit/1027505
- vuldb.com https://vuldb.com/vuln/431164
- vuldb.com https://vuldb.com/vuln/431164/cti
- sourcecodester.com https://www.sourcecodester.com/