Lucene search
+L

1738 matches found

CNNVD
CNNVD
added 2024/02/12 12:00 a.m.14 views

WordPress Plugin Restaurant Reservations Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS8.4AI score0.00328EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/07 2:15 a.m.6 views

CVE-2024-1268

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS5.3AI score0.00592EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/07 2:15 a.m.34 views

CVE-2024-1268

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS7.2AI score0.00592EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/07 2:15 a.m.28 views

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

6.5CVSS7.1AI score0.00592EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2024/02/07 1:31 a.m.47 views

CVE-2024-1268

CVE-2024-1268 concerns CodeAstro Restaurant POS System 1.0. The vulnerability affects an unknown part of the file update_product.php, enabling an unrestricted upload that could be triggered remotely. Multiple sources (NVD, Red Hat, CVE listings, PRION) describe it as a critical issue with potenti...

9.8CVSS9.4AI score0.00592EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/02/07 1:31 a.m.46 views

CVE-2024-1268 CodeAstro Restaurant POS System update_product.php unrestricted upload

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

6.5CVSS9.7AI score0.00592EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/07 1:31 a.m.17 views

CVE-2024-1268 CodeAstro Restaurant POS System update_product.php unrestricted upload

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

6.5CVSS6.9AI score0.00592EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/07 1:15 a.m.13 views

CVE-2024-1267

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score0.00401EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/07 1:15 a.m.32 views

CVE-2024-1267

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

6.1CVSS4.4AI score0.00401EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/07 1:15 a.m.25 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

4CVSS6.4AI score0.00401EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/07 1:00 a.m.18 views

CVE-2024-1267 CodeAstro Restaurant POS System create_account.php cross site scripting

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

4CVSS6.2AI score0.00401EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/07 1:00 a.m.58 views

CVE-2024-1267

The connected documents confirm CVE-2024-1267 affects CodeAstro Restaurant POS System v1.0, where the file create_account.php is vulnerable through manipulation of the Full Name parameter, causing cross-site scripting. The vulnerability can be exploited remotely and the exploit has been publicly ...

6.1CVSS6AI score0.00401EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/02/07 12:00 a.m.15 views

Restaurant POS System Cross-Site Scripting Vulnerability

Restaurant POS System is a full-featured Restaurant POS System project based on the Restaurant POS System project by Martin Mbithi Nzilani Individual Developer. A cross-site scripting vulnerability exists in Restaurant POS System version 1.0, which stems from the parameter Full Name in the file...

6.1CVSS5.9AI score0.00401EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/07 12:00 a.m.8 views

Restaurant POS System Code Issue Vulnerability

Restaurant POS System is a full-featured Restaurant POS System based project by Martin Mbithi Nzilani Personal Developer. A code issue vulnerability exists in Restaurant POS System version 1.0, which stems from the file updateproduct.php that causes unrestricted uploads...

9.8CVSS7AI score0.00592EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/06 12:00 a.m.9 views

PT-2024-17713 · Codeastro · Codeastro Restaurant Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro Restaurant POS System version 1.0 Description: A critical issue was found in the CodeAstro Restaurant POS System, affecting an unknown part of the file update product.php. This issue leads to unrestricted upload and can be initiated...

9.8CVSS7AI score0.00592EPSS
SaveExploits0References8
OSV
OSV
added 2024/02/05 7:15 a.m.8 views

CVE-2024-24838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

5.4CVSS6.7AI score0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/05 6:35 a.m.16 views

CVE-2024-24838 WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5...

6.5CVSS6.7AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/05 6:35 a.m.59 views

CVE-2024-24838

CVE-2024-24838 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Five Star Restaurant Reviews (Five Star Plugins) affecting versions up to 2.3.5. The root cause is improper neutralization of input during web page generation, enabling an attacker with Contributor+ privil...

6.5CVSS6.7AI score0.00309EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.10 views

WordPress plugin Five Star Restaurant Reviews Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.3AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.12 views

PT-2024-20605 · Unknown · Five Star Restaurant Reviews

Name of the Vulnerable Software and Affected Versions: Five Star Restaurant Reviews versions prior to 2.3.6 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...

6.5CVSS5.9AI score0.00309EPSS
SaveExploits0References7
Rows per page
Query Builder