Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering… (CVE-2026-114700)

CVE-2026-114700 describes a stored cross-site scripting (XSS) vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation affecting versions through 2.4.4. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed when other users access the affected pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impact on confidentiality, integrity, and availability rated as low to low to low respectively, and scope changed.

Successful exploitation could allow an attacker with limited privileges to inject and execute malicious scripts in the context of other users, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium severity based on the CVSS score of 6.5.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit user privileges and avoid exposing the affected functionality to untrusted users.