SourceCodester Pizzafy Ecommerce System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Pizzafy Ecommerce System version 1.0. The issue arises in the save_order function within admin/ajax.php, where improper handling of the first_name argument allows for script injection. This vulnerability can be exploited remotely, and the details of the exploit have been made public.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.