CVE-2026-102264

Name of the Vulnerable Software and Affected Versions mwasikz robo-cafe-rms versions up to 228c44a02823f04e85db32b7137809a2856148fc

Description A cross site scripting issue exists within the Edit Profile Feature in the file frontend/update-account.php. Remote exploitation is possible by manipulating the Name, Address, or City arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.