CVE-2026-73182

BBQ Pro versions up to and including 3.9 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, which could allow attackers to execute arbitrary scripts in the context of the user's session. This vulnerability poses a high risk, particularly for organizations that utilize BBQ Pro for web-based management or monitoring, as it can lead to data theft or session hijacking. Users and administrators of affected versions should prioritize immediate remediation to mitigate potential exploitation.