Cross-Site Scripting in Menulux Portal Software by Menulux Software Inc.
CVE-2026-18957

5.4MEDIUM

Key Information:

Vendor: Menulux Software Inc.
Status: Menulux Portal
Vendor: CVE Published:; 4 September 2026

🔔 Create Menulux Software Inc. Vulnerability Alert

What is CVE-2026-18957?

The Menulux Portal suffers from a stored cross-site scripting vulnerability due to improper handling of user input during web page generation. This security flaw allows attackers to inject malicious scripts into pages viewed by other users, potentially compromising user data and system integrity. Users of Menulux Portal versions prior to a specified release are advised to implement immediate security measures.

Affected Version(s)

Menulux Portal 0 < 20260903211448

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 4, 2026
Vulnerability Reserved
Aug 5, 2026

Credit

Şahnur Eren ALOĞLU

CVE-2026-18957 Data

JSON