CVE-2024-35766 WordPress WPPizza – A Restaurant Plugin plugin <= 3.18.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Restaurant Reservations versions = 2.0...

WordPress Restaurant Reservations Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Reservations Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37223 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e2900d56cf87 Credits LVT-tholv2k Required privilege...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

PT-2024-27759

Name of the Vulnerable Software and Affected Versions CodeProjects Restaurant Reservation System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Date parameter at the "index.php" endpoint. There is no informatio...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 contains a SQL injection vulnerability in the reserv_id parameter of view_reservations.php. The vulnerability is documented across multiple sources (e.g., CVE-2024-37799) with an Associated CVSS v3.1 base score of 5.4 (Network attack, Low attack com...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...

PT-2024-27757 · Unknown · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: CodeProjects Restaurant Reservation System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the reserv id parameter at the "view reservations.php" endpoint. Recommendation...

CodeProjects Restaurant Reservation System Cross-Site Scripting Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A cross-site scripting vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a cross-site scripting vulnerability in the Date parameter of index.php...

CVE-2024-1399 Restaurant Menu and Food Ordering <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2024-1399 Restaurant Menu and Food Ordering <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

WordPress plugin Restaurant Menu and Food Ordering security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Restaurant Menu and Food Ordering plugin <= 2.4.0 - Authenticated Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Stored Cross-Site Scripting via Shortcode vulnerability discovered by Lucio Sá in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.0...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1399 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

CVE-2024-5459

The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'addsection', 'addmenu', 'addmenuitem', and 'addmenupage' functions in all versions up to, and including, 2.4.16. This makes it possible for authenticated...

CVE-2024-5459

The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'addsection', 'addmenu', 'addmenuitem', and 'addmenupage' functions in all versions up to, and including, 2.4.16. This makes it possible for authenticated...