CVE-2026-14622

HIGH 7.3

jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajax_files of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-306 CWE-287
Vendor	jairiidriss
Product	restaurant-website-php-mysql
Published	Jul 4, 2026

Stay Ahead of the Next One

Get instant alerts for jairiidriss restaurant-website-php-mysql

Be the first to know when new high vulnerabilities affecting jairiidriss restaurant-website-php-mysql are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

jairiidriss / restaurant-website-php-mysql

521428b5b612449df0cf4a5d15ee40cba67f3d35

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/376138 vuldb.com: https://vuldb.com/vuln/376138/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14622 vuldb.com: https://vuldb.com/submit/845099 github.com: https://github.com/jairiidriss/restaurant-website-php-mysql/issues/6 github.com: https://github.com/jairiidriss/restaurant-website-php-mysql/

Credits

🔍 Fklov (VulDB User) VulDB CNA Team