A vulnerability was found in code-projects Food Ordering System 1.0. It has been declared as critical. This affects an unknown function of the file /admin/menu.php. Executing manipulation of the argument itemPrice can lead to sql injection.
This vulnerability is handled as CVE-2025-12315. The attack can be executed remotely. Additionally, an exploit exists.