CVE-2026-30531

8.8 highEPSS 0.5%

High (8.8) in oretnom23 online food ordering system. EPSS 0.5% chance of exploitation in the next 30 days.

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to properly sanitize user input supplied to the "name" parameter. This allows an authenticated attacker to inject malicious SQL commands.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oretnom23:online_food_ordering_system

References

https://github.com/meifukun/Web-Security-PoCs/blob/main/Online-Food-Ordering-System/SQLi-Actions-saveCategory-name.md

Check your stack JSON