CVE-2026-7410 | SourceCodester Pizzafy Ecommerce System 1.0 ajax.php?action=add_to_cart pid sql injection

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. It has been rated as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection.

This vulnerability is listed as CVE-2026-7410. The attack may be initiated remotely. In addition, an exploit is available.