CVE-2025-12299 | code-projects Simple Food Ordering System 1.0 /addproduct.php pname/category/price cross site scripting

A vulnerability was found in code-projects Simple Food Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site scripting.

This vulnerability is known as CVE-2025-12299. It is possible to launch the attack remotely. Furthermore, an exploit is available.