CVE-2025-10564 | Campcodes Grocery Sales and Inventory System 1.0 ajax.php?action=delete_category ID sql injection

A vulnerability classified as critical has been found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Performing manipulation of the argument ID results in sql injection.

This vulnerability is reported as CVE-2025-10564. The attack is possible to be carried out remotely. Moreover, an exploit is present.