This vulnerability in AdithyaYelloju Restaurant-Management-System up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c allows remote attackers to perform SQL injection via manipulation of the item, price, image, or type parameters in the admin/add_menu.php file. The product's rolling release model means no fixed version is identified. The vulnerability was responsibly disclosed but remains unpatched as of the latest information. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector and low complexity.

Successful exploitation could allow an attacker with low privileges to execute SQL injection attacks remotely, potentially leading to unauthorized data access or modification. The vulnerability affects the integrity and confidentiality of the system's database. However, no known active exploitation in the wild has been reported.

No official fix or patch is currently available as the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a patch is released, restricting access to the affected functionality and applying web application firewall rules to detect and block SQL injection attempts may help mitigate risk.