Is CVE-2026-19916 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19916?

CVE-2026-19916 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-19916

Description

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file edit_food_items.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.