A vulnerability, which was classified as problematic, has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function
save_order of the file /admin/ajax.php?action=save_order. Performing a manipulation of the argument first_name results in cross site scripting.
This vulnerability is known as CVE-2026-7296. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
