Cross-site Scripting Vulnerability in Gloriafood Restaurant Menu Plugin
CVE-2026-114700

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Restaurant Menu – Food Ordering System – Table Reservation
Vendor
CVE Published:
22 October 2026

What is CVE-2026-114700?

The Gloriafood Restaurant Menu – Food Ordering System – Table Reservation plugin has a vulnerability that allows for stored Cross-site Scripting (XSS). This issue arises from improper handling of user inputs during webpage generation, potentially enabling attackers to inject malicious scripts. The vulnerability affects all versions of the plugin up to 2.4.4, posing a risk to users by compromising the integrity of the web application.

Affected Version(s)

Restaurant Menu – Food Ordering System – Table Reservation 0 <= 2.4.4

References

https://patchstack.com/database/wordpress/plugin/menu-ord...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack)
.