High severity7.3NVD Advisory· Published Sep 15, 2026· Updated Sep 15, 2026

CVE-2026-90854

Description

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Sourcecodester/Online Food Ordering Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-90854nvd
vuldb.com/submit/927127nvd
vuldb.com/vuln/403411nvd
vuldb.com/vuln/403411/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000