Multi-Vendor Online Grocery Management System vulnerabilities

2 known vulnerabilities in Multi-Vendor Online Grocery Management System from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Multi-Vendor Online Grocery Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-14695Jul 5, 2026SourceCodester

  A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injec

• 7.3 High severity

  Multi-Vendor Online Grocery Management System: Incorrect Privilege Assignment

  CVE-2026-14690Jul 5, 2026SourceCodester

  A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possib