CVE-2022-4657

🗓️ 06 Feb 2023 20:11:15Reported by [email protected]Type

The Restaurant Menu WordPress plugin allows stored Cross-Site Scripting (XSS) attacks by not validating and escaping some shortcode attributes

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2022-4657 Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode	6 Feb 202319:59	–	cvelist
WPVulnDB	Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode	16 Jan 202300:00	–	wpvulndb
Prion	Cross site scripting	6 Feb 202320:15	–	prion
Vulnrichment	CVE-2022-4657 Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode	6 Feb 202319:59	–	vulnrichment
wpexploit	Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode	16 Jan 202300:00	–	wpexploit
Patchstack	WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)	5 Jan 202300:00	–	patchstack
CVE	CVE-2022-4657	6 Feb 202320:15	–	cve

Nvd

Node

oracle restaurant_menu_-_food_ordering_system_-_table_reservationRange<2.3.6wordpress

Source	Link
wpscan	www.wpscan.com/vulnerability/a90a413d-0e00-4da8-a339-d6cdfba70bb3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2023 20:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.4

EPSS0.00308