Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:38 a.m.5 views

CVE-2024-24838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

6.5CVSS6.7AI score0.00143EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/05 6:35 a.m.11 views

CVE-2024-24838 WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

6.5CVSS6.7AI score0.00143EPSS
Exploits0References1
CVE
CVE
added 2024/02/05 6:35 a.m.41 views

CVE-2024-24838

CVE-2024-24838 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Five Star Restaurant Reviews (Five Star Plugins) affecting versions up to 2.3.5. The root cause is improper neutralization of input during web page generation, enabling an attacker with Contributor+ privil...

6.5CVSS6.7AI score0.00143EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.4 views

WordPress plugin Five Star Restaurant Reviews Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.3AI score0.00143EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/02/02 12:0 a.m.7 views

WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Five Star Restaurant Reviews Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24838 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 99e84e82442f Credits Steven Julian Required...

6.5CVSS6.5AI score0.00143EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder