SourceCodester Online Food Ordering System 1.0 contains a vulnerability in the admin/add_food.php file where manipulation of the image argument allows unrestricted file upload. This flaw can be exploited remotely and has publicly available exploit code. The vulnerability has a medium severity rating with a CVSS score of 4.7.