https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1600.htmlhttps://patchthecve.com/cve/CVE-2026-1600.htmlWed, 17 Jun 2026 10:16:08 +0000MEDIUM 4.3: A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business logic https://patchthecve.com/cve/CVE-2026-1599.htmlhttps://patchthecve.com/cve/CVE-2026-1599.htmlWed, 17 Jun 2026 10:16:08 +0000MEDIUM 4.3: A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/service_charge/grandtotal can lead https://patchthecve.com/cve/CVE-2026-1598.htmlhttps://patchthecve.com/cve/CVE-2026-1598.htmlWed, 17 Jun 2026 10:16:08 +0000LOW 3.5: A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It is phttps://patchthecve.com/cve/CVE-2024-1749.htmlhttps://patchthecve.com/cve/CVE-2024-1749.htmlWed, 17 Jun 2026 07:04:55 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site scripting