Medium · 5.4 CVE-2026-19057 EUVD-2026-71103GHSA-8x53-683c-jr8f

Stored XSS in Gastromenum's Gastromenum Ticket and QR Menu System

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by TR-CERT

Vendor: Gastromenum Product: Gastromenum Ticket and QR Menu System

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS.

This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Affected products

Vendor	Product	Affected	Fixed
Gastromenum	Gastromenum Ticket and QR Menu System	< 2026.08.31	2026.08.31

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1012 government-resource