CVE-2026-18957
MediumCVSS 5.4Summary
Menulux Portal by Menulux Software Inc. has a stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions before 20260903211448.
Risk Assessment
The risk involves execution of malicious script in users' browsers, potentially leading to data theft, session hijacking, or other attacks.
Recommendation
It is recommended to upgrade Menulux Portal to version 20260903211448 or later, which includes a fix for this issue.
Other vulnerabilities in Menulux Portal
See all- CVE-2026-19080High
Observable response discrepancy vulnerability in Menulux Portal before version 20260903211448 allows Account Footprinting.
- CVE-2026-19051High
Plaintext storage of a password vulnerability in Menulux Portal before version 20260903211448 allows Retrieve Embedded Sensitive Data.
- CVE-2026-19043Medium
Menulux Portal by Menulux Software Inc. has a missing authorization vulnerability that allows accessing functionality not properly constrained by ACLs. This issue affects versions before 20260903211448.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448.