Order Up Online Ordering System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Order Up Online Ordering System: 1 record(s), with affected versions and fixes.

CVE-2026-24494 Critical · 9.8 CWE-89 Feb 22, 2026

SQL injection vulnerability in Order Up Online Ordering System

SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.