PT-2025-38936 · Unknown · Will.I.Am Simple Restaurant Menu

Vinit Lakra · Published 2025-09-22 · Updated 2025-09-23 · CVE-2025-58647

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Will.I.am Simple Restaurant Menu versions through 1.2

Description The Simple Restaurant Menu software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into the application and executed by other users. The vulnerability allows an attacker to inject malicious code through web pages.

Recommendations Update Will.I.am Simple Restaurant Menu to a version later than 1.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-58647

Affected Products

Will.I.Am Simple Restaurant Menu

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58647 · Security Note
• https://twitter.com/CVEnew/status/1970393511124992237 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/simple-restaurant-menu/vulnerability/wordpress-simple-restaurant-menu-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/simple-restaurant-menu/vulnerability/wordpress-simple-restaurant-menu-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note