A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. It has been classified as critical. Affected by this issue is the function
save_menu of the file /admin/ajax.php?action=save_menu. Performing a manipulation results in sql injection.
This vulnerability is identified as CVE-2026-7408. The attack can be initiated remotely. Additionally, an exploit exists.
