Description
A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHPJabbers | Restaurant Menu Maker | 1.0, 1.1 | — |
References
- VDB-325184 | PHPJabbers Restaurant Menu Maker preview.php cross site scripting vdb-entry technical-description
- VDB-325184 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #655884 | PHPJABBERS Restaurant Menu Maker V1.1 Cross Site Scripting third-party-advisory
- https://github.com/485961590/CVE/issues/1 exploit issue-tracking