Lucene search

Krzysztof ZającPATCHSTACK:FA8E525FE14D0C685BCAED6969FDDE61

HistoryOct 31, 2022 - 12:00 a.m.

WordPress Five Star Restaurant Reservations plugin <= 2.4.11 - Unauth. Arbitrary Payment Status Update leading to Stored Cross-Site Scripting (XSS) vulnerability

2022-10-3100:00:00

Krzysztof Zając

patchstack.com

wordpress

five star

restaurant

reservations

plugin

unauthenticated

arbitrary

payment

status

update

stored

cross-site scripting

xss

vulnerability

krzysztof zając

update

solution

0.001 Low

EPSS

Percentile

40.2%

JSON

Unauth. Arbitrary Payment Status Update leading to Stored Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress Five Star Restaurant Reservations plugin (versions <= 2.4.11).

Solution

           Update the WordPress Five Star Restaurant Reservations plugin to the latest available version (at least 2.4.12).

CPENameOperatorVersion
five star restaurant reservationsle2.4.11

CPE	Name	Operator	Version
	five star restaurant reservations	le	2.4.11

References

wpscan.com/vulnerability/145e8d3c-cd6f-4827-86e5-ea2d395a80b9

0.001 Low

EPSS

Percentile

40.2%

JSON

Related for PATCHSTACK:FA8E525FE14D0C685BCAED6969FDDE61