Threats affecting pkg:github/ahmadmarz10-hub/CVEsMarz

CVE-2026-4898 is a medium severity cross-site scripting (XSS) vulnerability in version 1.0 of the code-projects Online Food Ordering System. The vulnerability exists in the /dbfood/contact.php file where the 'Name' parameter can be manipulated remotely to inject malicious scripts. Exploitation requires user interaction and no privileges are needed. There is no information about an official patch or vendor advisory at this time.