CVE-2026-24494 | Order Up Online Ordering System 1.0 POST Request getintegrations store_id sql injection

A vulnerability, which was classified as critical, has been found in Order Up Online Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/integrations/getintegrations of the component POST Request Handler. The manipulation of the argument store_id leads to sql injection.

This vulnerability is traded as CVE-2026-24494. It is possible to initiate the attack remotely. There is no exploit available.