A vulnerability was found in code-projects Simple Food Order System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-4319. The attack can be launched remotely. Moreover, an exploit is present.