CVE-2026-1598: Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting
A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1598?
CVE-2026-1598 is classified as a medium severity vulnerability due to its potential to allow cross site scripting attacks.
How do I fix CVE-2026-1598?
To fix CVE-2026-1598, update the Bdtask Bhojon All-In-One Restaurant Management System to a version beyond 20260116.
What function is affected by CVE-2026-1598?
CVE-2026-1598 affects the user information profile function located at /dashboard/home/profile.
Who is affected by CVE-2026-1598?
Users of Bdtask Bhojon All-In-One Restaurant Management System versions up to and including 20260116 are affected by CVE-2026-1598.
What type of vulnerability is CVE-2026-1598?
CVE-2026-1598 is a cross site scripting (XSS) vulnerability.