A vulnerability was found in code-projects Simple Food Ordering System 1.0. It has been classified as problematic. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting.

This vulnerability is handled as CVE-2025-12300. The attack can be initiated remotely. Additionally, an exploit exists.