A vulnerability labeled as critical has been found in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of the component Shopping Cart Module. Executing a manipulation of the argument del can lead to sql injection.
This vulnerability is handled as CVE-2026-4841. The attack can be executed remotely. Additionally, an exploit exists.
