Code-Projects Simple Food Ordering System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Simple Food Ordering System version 1.0. The issue resides in the file '/ordersimple/order.php', where the 'id' parameter is not properly sanitized before being output, allowing attackers to inject malicious scripts. This vulnerability can be exploited remotely and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, send a request to '/ordersimple/order.php' with the 'id' parameter manipulated to include a script payload, such as a JavaScript alert. The injected script will execute in the browser of anyone who views the page.