Threat Intelligence / CVE / CVE-2026-13499

CVE-2026-13499

CVSS 4.3 (MEDIUM) · EPSS 0.3% · Priority 2.9/10 · Published 2026-06-28

As of 2026-06-29, CVE-2026-13499 is a CVSS 4.3 (MEDIUM-severity) vulnerability. EPSS exploitation probability 0.3%. Threadlinqs Intelligence tracks 0 threats exploiting it.

Last updated: 2026-06-29

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration Handler. Performing a manipulation of the argument Username results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-79, CWE-94

References

Full detection coverage & IOCs for threats exploiting CVE-2026-13499 are available via the Threadlinqs MCP server (Purple tier). View plans →

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.