CVE-2026-113741

CVE-2026-113741 · itsourcecode Online Cake Ordering System 404.php cross site scripting

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

CVSS 5.3 · Medium · EPSS 0.3%

Published: 2026-10-21T01:00:23.541Z
Updated: 2026-10-21T13:40:41.222Z

Affected products and versions

online cake ordering system
Versions
- 1.0: Affected
No fix published

Original sources

https://vuldb.com/vuln/422919
https://vuldb.com/vuln/422919/cti
https://vuldb.com/cve/CVE-2026-113741
https://vuldb.com/submit/1017672
https://github.com/milo417/submit/issues/2
https://itsourcecode.com/
https://nvd.nist.gov/vuln/detail/CVE-2026-113741

Check your server →

CVE-2026-113741 · itsourcecode Online Cake Ordering System 404.php cross site scripting

Affected products and versions

online cake ordering system

Original sources