This vulnerability affects the save_product function in the POST Parameter Handler component of SourceCodester Online Food Ordering System 1.0. Manipulating the price argument leads to business logic errors, potentially allowing attackers to alter product pricing or related business processes. The issue is exploitable remotely without authentication or user interaction. The CVSS 4.0 base score is 5.3, indicating medium severity. No official fix or patch has been released, and the vendor has not provided remediation details.

Successful exploitation could result in unauthorized modification of product pricing or other business logic related to product management, potentially causing financial discrepancies or abuse of the ordering system's pricing mechanisms. There is no evidence of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and restrict access to the affected functionality where possible. Implement input validation and business logic checks on the price parameter to mitigate manipulation risks.