CVE-2021-41644: ORETNOM23 Online Food Ordering System

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters.

Affected products

• ORETNOM23 Online Food Ordering System: version 2.0 only

Published 2021-10-29. Last modified 2026-06-17.