Online Pizza Delivery System Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Online Pizza Delivery System version 1.0, specifically within the search.php file. This vulnerability allows attackers to execute arbitrary JavaScript in the victim's browser by injecting malicious scripts through the unsanitized search parameter.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute scripts in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to the search.php file with a payload injected into the search parameter. The injected script will be executed in the browser, demonstrating the cross-site scripting vulnerability.