CVE-2026-13499

Name of the Vulnerable Software and Affected Versions yashpokharna2555 restaurent-management-system (affected versions not specified)

Description A security flaw exists in the Registration Handler component within the login register.php file. A remote attacker can perform cross-site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the Username argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.