CVE-2026-7294 | SourceCodester Pizzafy Ecommerce System 1.0 index.php?page=save_settings Name cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /admin/index.php?page=save_settings. This manipulation of the argument Name causes cross site scripting.

This vulnerability appears as CVE-2026-7294. The attack may be initiated remotely. In addition, an exploit is available.