CVE-2026-114700: WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ordering-reservations allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: from n/a through 2.4.4.
Affected Software
Event History
Frequently Asked Questions
Which installations should be treated as affected?
Installations using the GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin at version 2.4.4 or earlier should be treated as affected. The available data does not identify a fixed version.
What access does an attacker need to exploit this issue?
The attacker needs network access and low-level privileges in the affected application, according to the CVSS vector. Exploitation also requires user interaction.
What could successful exploitation affect?
The CVSS assessment indicates low impact to confidentiality, integrity, and availability, with scope changed. Because this is stored XSS, injected content may persist and execute when a user interacts with the affected page.