PatchTheCVEbakeshop online ordering system vulnerabilities and fixes
Recent CVEs affecting bakeshop online ordering system, with upgrade or downgrade steps. 2 tracked.
Also searched as: bakeshoponlineorderingsystem.
bakeshop online ordering system has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-29. Highest priority: CVE-2025-9660 (score 47/100).
- CVE-2025-9660 HIGH 7.3 DOWNGRADE A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0
- CVE-2020-35309 MEDIUM 4.8 DOWNGRADE Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remot
FAQ
How do I fix bakeshop online ordering system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bakeshop online ordering system being exploited right now?
None of the tracked bakeshop online ordering system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bakeshop online ordering system CVE should I patch first?
CVE-2025-9660 currently ranks highest (47/100): A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0.