CVE-2021-38699-Stored-XSS

CVE-2021-38699: XSS Armazenado no TastyIgniter v3.0.7 Restaurtant CMS Existe cross-site scripting autenticado armazenado no TastyIgniter v3.0.7 Restaurtant CMS na seção de Logs do Sistema do aplicativo web. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute cross-site scripting reflexivo em...

CVE-2025-65320

CVE-2025-65320 Título Almacenamiento en texto claro de material de licencia confidencial en la memoria del proceso en Abacre Restaurant Point of Sale POS Resumen Existe una vulnerabilidad en Abacre Restaurant Point of Sale POS versiones = 15.0.0.1656 donde los datos confidenciales de licencia se...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Memorizzazione in chiaro di informazioni sensibili in memoria in Abacre Restaurant Point of Sale POS. Tutte le versioni di Abacre Restaurant Point of Sale POS fino alla 15.0.0.1656 sono vulnerabili alla memorizzazione in chiaro di informazioni sensibili in memoria...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Befehlseinschleusung Authentifizierte Remote-OS-Befehlseinschleusung/Fernausführung von Code im TastyIgniter v3.0.7 Sendmail-Webteil CVE-2021-38817 Eine anfällige authentifizierte Remote-OS-Befehlseinschleusung existiert im TastyIgniter v3.0.7...

primefaces

Vom Tisch zum Code: Eine Reise durch die RCE-Schwachstelle in POS für Restaurants Bei dieser Gelegenheit sind wir zufällig auf eine Schwachstelle gestoßen, die in mehreren POS-Anwendungen für Restaurants XETUX vorhanden ist, einer Lösung zur Überwachung und Automatisierung von Restaurants. In...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof-of-Concept-Code zur Ausnutzung von CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - authentifizierte Contributor+ SQL-Injection. Proof of Concept Dies ist ein Proof-of-Concept-Exploit für die Schwachstelle CVE-2024-38793, eine SQL-Injection-Schwachstelle in...

CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : Molteplici XSS riflessi in TastyIgniter v3.0.7 Restaurtant CMS Nella dashboard di amministrazione di TastyIgniter versione 3.0.7 è presente una XSS riflessa autenticata. https://vulners.com/cve/CVE-2021-38699 POC: Parametro start della dashboard di amministrazione: root@kitploit:...

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS in TastyIgniter v3.0.7 Restaurant CMS Eine Stored Cross-Site-Scripting-Schwachstelle XSS besteht im TastyIgniter v3.0.7 Restaurant CMS. Das Beschreibungseingabefeld unter /admin/locations/settings ist nicht ordnungsgemäß bereinigt und ermöglicht...

CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400 WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

EUVD-2026-60806

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400

CVE-2026-73400 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Restaurant Menu by MotoPress , affecting versions 2.4.11 and below . The flaw allows a remote, unauthenticated attacker to include and read local files on the server, potentially leading to full ...

PT-2026-77120

Name of the Vulnerable Software and Affected Versions Restaurant Menu by MotoPress versions prior to 2.4.12 Description An unauthenticated Local File Inclusion LFI exists, which allows a remote attacker to read files from the server without requiring user interaction. Local File Inclusion is a...

VulnCheck KEV: CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-15147 Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark...

CVE-2026-15151 Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

CVE-2026-14622

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

CVE-2026-14622

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

CVE-2026-14622 jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...