CVE 5.1 MEDIUM

Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting_CVE-2026-1598

5.1 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2026-1598
Source VulDB
Published Jan 29, 2026 at 17:02

Affected Product

Vendor Bdtask
Product Bhojon All-In-One Restaurant Management System
Version 20260116
Affected Versions Bdtask Bhojon All-In-One Restaurant Management System 20260116

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.