CVE-2026-116217 | francoisjacquet RosarioSIS up to 12.9.1 Food Service MenuReports.php menu_id/modname cross site scripting

October 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in francoisjacquet RosarioSIS up to 12.9.1. This affects an unknown part of the file modules/Food_Service/MenuReports.php of the component Food Service. Such manipulation of the argument menu_id/modname leads to cross site scripting.

This vulnerability is listed as CVE-2026-116217. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More