Bhojon Restaurant Management System 2.7 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.7 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jayden Caelli - ret2desync Patchstack Alliance in WordPress Plugin Best Restaurant Menu by PriceListo versions = 1.4.1...

CVE-2024-37223

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...

CVE-2024-37223

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...

CVE-2024-37223 WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...

CVE-2024-37223 WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...

CVE-2024-37223

CVE-2024-37223 is a Stored XSS in Nicdark Restaurant Reservations (WordPress plugin nd-restaurant-reservations) up to version 2.0, caused by improper input neutralization during web page generation. Attacker input reaches page output and can compromise visitors. Exploitation requires user interac...

PT-2024-27392 · Unknown · Nicdark Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: Nicdark Restaurant Reservations versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.1 is vulnerable to SQL Injection

Software Best Restaurant Menu by PriceListo Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38793 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID e01346317df5 Credits Jayden Caelli ret2desync...

WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ReDi Restaurant Reservation versions = 24.0422...

WordPress ReDi Restaurant Reservation Plugin <= 24.0422 is vulnerable to Broken Access Control

Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0422 Fixed in 24.0712 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38737 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8f8c91902fd2 Credits Ananda Dhakal...

CVE-2024-35766 WordPress WPPizza – A Restaurant Plugin plugin <= 3.18.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Restaurant Reservations versions = 2.0...

WordPress Restaurant Reservations Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Reservations Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37223 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e2900d56cf87 Credits LVT-tholv2k Required privilege...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...

PT-2024-27759

Name of the Vulnerable Software and Affected Versions CodeProjects Restaurant Reservation System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Date parameter at the "index.php" endpoint. There is no informatio...