This vulnerability affects the save_product function in the POST Parameter Handler component of SourceCodester Online Food Ordering System 1.0. Specifically, manipulation of the 'price' argument in /Actions.php leads to business logic errors. The issue can be exploited remotely without authentication or user interaction. The CVSS 4.0 base score is 5.3 (medium severity), reflecting the potential impact on business logic integrity. No official patch or remediation level has been disclosed, and the product is not a cloud service. Public exploits exist but no known exploitation in the wild has been reported.

Successful exploitation allows an attacker to manipulate the price parameter in product data, causing business logic errors. This could result in incorrect pricing information being saved or processed, potentially affecting transaction integrity or financial calculations within the application. There is no indication of direct system compromise or data disclosure from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor vendor channels for updates. Until a patch is available, consider restricting access to the affected functionality or implementing input validation controls to detect or block abnormal price parameter values if feasible.