WordPress Food Store – Online Food Delivery & Pickup plugin <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by GivMeInJ in WordPress Plugin Food Store – Online Food Delivery & Pickup versions = 1.5.5...

WordPress Food Store cross-site scripting vulnerability

WordPress Food Store versions 1.5.5 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping of the servicetype cookie. Unauthenticated attackers can inject payloads via the ?type= query parameter on the public checkout pag...

WordPress Food Store – Online Food Delivery & Pickup plugin <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Food Store – Online Food Delivery & Pickup versions = 1.5.5...

CVE-2025-22314 WordPress Food Store plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through 1.5.1...