CVE-2026-14693: Improper Authorization in SourceCodester Multi-Vendor Online Grocery Management System 1.0
A vulnerability has been discovered in the SourceCodester Multi-Vendor Online Grocery Management System 1.0, specifically in the `cancel_order` function of the `classes/Master.php` file. This flaw leads to improper authorization, allowing remote attackers to manipulate the system without proper permissions. The vulnerability has a CVSS score of 5.4 and is classified as medium severity. While it has not been reported as actively exploited, a proof-of-concept exploit has been published.