CVE-2022-29651: ORETNOM23 Online Food Ordering System

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

• ORETNOM23 Online Food Ordering System: version 1.0 only

Published 2022-05-25. Last modified 2026-06-17.