A vulnerability classified as critical was found in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function
save_product of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors.
This vulnerability is listed as CVE-2026-5811. The attack may be performed from remote. In addition, an exploit is available.
