CVE-2026-76995 — SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload
A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu.…
Published: 2026-08-20 · CVSS: 5.1 · CVSS 4.0
A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7