CVE-2026-4898 | code-projects Online Food Ordering System 1.0 /dbfood/contact.php Name cross site scripting

A vulnerability classified as problematic has been found in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting.

This vulnerability is traded as CVE-2026-4898. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.