This vulnerability affects code-projects Online Food Order System version 1.0. It is a cross-site scripting (XSS) flaw caused by improper sanitization of the 'dname' parameter in the edit_food_items.php file. An attacker can remotely exploit this by injecting malicious scripts via the 'dname' argument, potentially leading to script execution in the context of the victim's browser. The vulnerability is publicly known and exploitable, but no official patch or remediation guidance has been provided by the vendor as of the publication date.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of users interacting with the affected functionality. This can lead to session hijacking, defacement, or redirection to malicious sites. The vulnerability requires low attack complexity and no privileges but does require user interaction. The overall impact is rated medium.

No official patch or remediation has been published by the vendor. Users should monitor the vendor advisory for updates. Until a fix is available, consider applying input validation or sanitization controls on the 'dname' parameter at the application or web server level to mitigate exploitation risk.