A vulnerability classified as problematic was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function
save_menu of the file /admin/ajax.php?action=save_menu. Such manipulation of the argument Name leads to cross site scripting.
This vulnerability is traded as CVE-2026-7295. The attack may be launched remotely. Furthermore, there is an exploit available.
