Log in Start free

Vulnerability · Published Jun 28, 2026 · Assigned by VulDB

CVE-2026-13499yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting

Medium 4.3

In plain English

A medium-severity cross-site scripting in restaurent-management-system from yashpokharna2555. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 59.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration Handler. Performing a manipulation of the argument Username results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Affected products (as reported)

VendorProductVersions
yashpokharna2555 restaurent-management-system 5f3eca87cb681366866a78038af17891c4c866126d1cc94c9007e2373d30d9c940824a5d2f50d9b6b7124069da225d5be3f430eb4d8e23d294f7a14f

Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References