Dashboard / CVE-2026-122190

CVE-2026-122190

LOW
INFO Priority: 0.00 BB Relevance: 39/100
Published: 2026-11-05 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: Passive
S: X
AT: None
VC: None
VI: Low
VA: None

Description

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
SourceCodester Online Food Ordering System 1.0
SourceCodester Online Food Ordering System 1.0

References & Advisories (6)

https://vuldb.com/vuln/431164
vdb-entry technical-description
https://vuldb.com/submit/1027505
third-party-advisory
https://vuldb.com/vuln/431164/cti
signature permissions-required

Bug Bounty Relevance

39 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

1.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.21%
Raw Score 0.002100
Percentile 11.3%
Date 2026-11-09

EPSS Trend

2026-11-09
0.00210
2026-11-08
0.00210
2026-11-07
0.00210
2026-11-06
0.00210
2026-11-05
0.00210

Intelligence Sources

mitre ref →
nvd ref →

External Links