CVE-2026-13499CWE-79CWE-94

yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting

Medium · published June 28, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
39.7
In the wild
Unconfirmed
What it is

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration Handler. Performing a manipulation of the argument Username results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00470 · 39.7th percentile
Weaknesses
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-06-28T13:15Z
EPSS history
Timeline
  • 28 JUN 13:15Z
    yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting
    cvelistv5