CVE-2026-19057

MediumCVSS 5.4

Published: 04/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 04/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Risk Assessment

The risk is the potential for persistent malicious script execution in users' browsers, which could lead to data theft, session hijacking, or other attacks. The attack can be used against system customers.

Recommendation

It is recommended to upgrade the system to version 2026.08.31 or later, which includes XSS fixes. Also, implement input and output filtering mechanisms.

Other vulnerabilities in Gastromenum Ticket and QR Menu System

CVE-2026-19081Medium
Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS