SourceCodester Food Ordering System 1.0 contains a vulnerability in the admin/update_food.php file related to the Admin Image Handler component. The flaw involves manipulation of the 'cmd' argument, which leads to unrestricted file upload. This vulnerability can be exploited remotely and public exploit code is available. The CVSS score is 7.3, indicating a high severity issue.