Vulnerability Description
A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fabian | Simple Food Ordering System | 1.0 |
Related Weaknesses (CWE)
References
- https://code-projects.org/Product
- https://github.com/underatted/CVE/issues/20ExploitThird Party Advisory
- https://vuldb.com/?ctiid.329972Permissions RequiredVDB Entry
- https://vuldb.com/?id.329972Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.676012Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-12300?
CVE-2025-12300 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes...
How severe is CVE-2025-12300?
CVE-2025-12300 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12300?
Check the references section above for vendor advisories and patch information. Affected products include: Fabian Simple Food Ordering System.