CVE-2025-10827: Phpjabbers Restaurant Menu Maker

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected products

• Phpjabbers Restaurant Menu Maker: version 1.1 only

Published 2025-09-23. Last modified 2026-06-17.