Lucene search
PRIOn knowledge basePRION:CVE-2022-0421HistoryNov 21, 2022 - 11:15 a.m.
Cross site scripting
2022-11-2111:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
cross-site scripting
authorization
paymentstatus
vulnerabilities
0.001 Low
EPSS
Percentile
40.3%
The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping, attackers could perform Cross-Site Scripting attacks against a logged in admin viewing the failed payments
| CPE | Name | Operator | Version |
|---|---|---|---|
| five_star_restaurant_reservations | lt | 2.4.12 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-0421
2022-11-21 11:15:19
cvelist
cvelist
cnvd
cnvd
cve
cve
CVE-2022-0421
2022-11-21 11:15:19