CVE-2026-7297 | SourceCodester Pizzafy Ecommerce System 1.0 ajax.php?action=save_user Name cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation of the argument Name can lead to cross site scripting.

This vulnerability is handled as CVE-2026-7297. The attack can be executed remotely. Additionally, an exploit exists.