CVE-2026-122190

The SourceCodester Online Food Ordering System 1.0 is vulnerable to Cross-Site Scripting (XSS) within the Category Management component. The flaw exists in an unknown function of the admin/add_category.php file, where failing to properly sanitize the category_title argument allows for the injecti...