A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. It has been declared as critical. This affects the function
save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can lead to sql injection.
This vulnerability is tracked as CVE-2026-7409. The attack can be launched remotely. Moreover, an exploit is present.
