Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-18957 EUVD-2026-71037GHSA-hwxg-9xv5-wjh5

Stored XSS in Menulux Software's Menulux Portal

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS.

This issue affects Menulux Portal: before 20260903211448.

Affected products

VendorProductAffectedFixed
Menulux Software Menulux Portal < 20260903211448 20260903211448

References