CVE-2026-116605 — SourceCodester Online Food Ordering System order.php: client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. An unknown function in order.php is affected; manipulating the price/title argument results in client-side enforcement of server-side security. The attack can be launched remotely. The source states that the exploit is public and could be used.