CVE-2026-13571 identifies a business logic error in SourceCodester Simple Food Ordering System 1.0 within an unspecified function in /cart.php. The vulnerability arises from improper handling of the item_price parameter, allowing remote attackers to manipulate this argument and trigger business logic inconsistencies. This flaw does not require privileges or user interaction to exploit. No vendor advisory or patch information is available at this time.

Exploitation of this vulnerability could lead to business logic errors affecting the integrity of order pricing or transaction processing within the affected system. This may result in incorrect pricing, potential financial discrepancies, or other unintended behaviors related to order management. There is no indication of direct system compromise or data disclosure from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict access to the affected /cart.php functionality where possible. Consider implementing input validation or business logic checks on the item_price parameter as a temporary mitigation.