1738 matches found
PT-2024-21415 · Hangzhou Xiongwei Technology Development Co. · Restaurant Digital Comprehensive Management Platform
Name of the Vulnerable Software and Affected Versions: Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform version v1 Description: The issue allows an attacker to bypass authentication and perform arbitrary password resets. Recommendations: For...
CVE-2024-26520
An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets...
Bhojon Restaurant Management System 2.7 Insecure Direct Object Reference
==================================================================================================================================== | Title : Bhojon restaurant management system v2.7 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...
WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jayden Caelli - ret2desync Patchstack Alliance in WordPress Plugin Best Restaurant Menu by PriceListo versions = 1.4.1...
CVE-2024-37223
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...
CVE-2024-37223
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...
CVE-2024-37223 WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...
CVE-2024-37223 WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 2.0...
CVE-2024-37223
CVE-2024-37223 is a Stored XSS in Nicdark Restaurant Reservations (WordPress plugin nd-restaurant-reservations) up to version 2.0, caused by improper input neutralization during web page generation. Attacker input reaches page output and can compromise visitors. Exploitation requires user interac...
PT-2024-27392 · Unknown · Nicdark Restaurant Reservations
Name of the Vulnerable Software and Affected Versions: Nicdark Restaurant Reservations versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...
WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.1 is vulnerable to SQL Injection
Software Best Restaurant Menu by PriceListo Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38793 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID e01346317df5 Credits Jayden Caelli ret2desync...
WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ReDi Restaurant Reservation versions = 24.0422...
WordPress ReDi Restaurant Reservation Plugin <= 24.0422 is vulnerable to Broken Access Control
Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0422 Fixed in 24.0712 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38737 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8f8c91902fd2 Credits Ananda Dhakal...
CVE-2024-35766 WordPress WPPizza – A Restaurant Plugin plugin <= 3.18.13 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...
WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Restaurant Reservations versions = 2.0...
WordPress Restaurant Reservations Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Restaurant Reservations Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37223 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e2900d56cf87 Credits LVT-tholv2k Required privilege...
CVE-2024-37800
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...
CVE-2024-37800
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...