Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /admin/index.php?page=save_settings. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7294 Cross Site Scripting in SourceCodester Pizzafy Ecommerce System 1.0 Admin Settings https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7294
Post summary
A new CVE (CVE-2026-7294) for a cross‑site scripting flaw in SourceCodester Pizzafy Ecommerce System 1.0’s admin settings has been disclosed, with minimal detail beyond the vulnerability type.
CVE-2026-7294 A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /admin/index.php?page=sav… https://www.cve.org/CVERecord?id=CVE-2026-7294
Post summary
The post announces the discovery of a flaw in SourceCodester Pizzafy Ecommerce System 1.0 affecting the save_settings function, but no PoC, exploit, or remediation details are included.