CVE-2021-38699-Stored-XSS

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v3.0.7 Restaurtant CMS System Logs section of the web application. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute reflective cross site scripting...

CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v3.0.7 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version 3.0.7. https://vulners.com/cve/CVE-2021-38699 POC: Admin dashboard start param: POST http://cvefarm.local/admin/dashboard HTTP/1.1...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection. Proof Of Concept This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions ...

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS A stored Cross Site Scripting XSS vulnerability exists within TastyIgniter v3.0.7 Restaurant CMS. The description input field, located in /admin/locations/settings is not properly sanitized, and allows...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Cleartext Storage of Sensitive Information in Memory in Abacre Restaurant Point of Sale POS. All versions of Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid...

primefaces

From the Table to the Code: A Journey Through the RCE Vulnerability in POS for Restaurants This time we accidentally came across a vulnerability present in several POS applications for restaurants XETUX, which is a solution for restaurant monitoring and automation. In Panama, it is a widely used...

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

CVE-2026-114700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

CVE-2026-114700

The Gloriafood Restaurant Menu – Food Ordering System – Table Reservation (menu-ordering-reservations) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw occurs due to the Improper Neutralization of Input During Web Page Generation (CWE-79) in versions up to and inclu...

EUVD-2026-108081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

CVE-2026-114700 WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

CVE-2026-114700 WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: fro...

WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.4...

CVE-2026-109116

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

CVE-2026-109114

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

CVE-2026-109115

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...

CVE-2026-109116 AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

CVE-2026-109116

A vulnerability exists in the Order Management component of the AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c). The flaw resides in the mysqli_query function, where manipulating the ID argument allows for an authorization bypass . This attack c...

CVE-2026-109116 AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...