Medium 4.3

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...

CVE-2026-113741 First seen on SecPulse 10:17

Original description The description as published by the source.

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Source: NIST National Vulnerability Database NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.3; CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Published: Oct 21, 2026
First seen on SecPulse: 10:17
GHSA: GHSA-7894-wvvc-xh2c
CWE: CWE-79

NVD GitHub Advisory

Tags(click for explanation)

Programming Languages

PHP

Attack Types

Cross-Site Scripting

CWE

Cwe 79 Cwe 94

Detection sources

NIST National Vulnerability Database10:17
GitHub Security Advisories (Global)12:32