CVE-2026-13571
Medium · 5.3CVSS
5.3
EPSS
0.5%
Published
Jun 29, 2026
CISA due date
—
The record
A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument item_price can lead to business logic errors. The attack may be performed from remote. The exploit has been published and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-106070 A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong… CWE-840
- CVE-2026-115248 A vulnerability was detected in subhajitkhan online-clinic-management-system up to… CWE-840
- CVE-2026-85030 A vulnerability has been found in HKUDS AI-Trader up to… CWE-840
- CVE-2026-82423 A vulnerability has been found in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-79406 A security vulnerability has been detected in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-75081 A vulnerability was detected in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-19993 A vulnerability has been found in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-41973 Permission control vulnerability in calls. Impact: Successful exploitation of this… CWE-840