A vulnerability was found in code-projects Simple Food Ordering System 1.0. It has been rated as problematic. The affected element is an unknown function of the file /editproduct.php. Performing manipulation of the argument pname/category/price results in cross site scripting.
This vulnerability was named CVE-2025-12302. The attack may be initiated remotely. In addition, an exploit is available.
