Lucene search
+L

98 matches found

Patchstack
Patchstack
added 2023/05/10 12:0 a.m.20 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

7.1CVSS5.6AI score0.00385EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/01/05 12:0 a.m.17 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...

5.4CVSS5.6AI score0.00667EPSS
Exploits2References4Affected Software1
OSV
OSV
added 2022/11/03 5:15 p.m.10 views

CVE-2022-3776

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as formsaction, setoption...

8.8CVSS5.6AI score0.00482EPSS
Exploits0References2
NVD
NVD
added 2022/11/03 5:15 p.m.26 views

CVE-2022-3776

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as formsaction, setoption...

8.8CVSS0.00482EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/11/03 5:15 p.m.5 views

CVE-2022-2696

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to authorization bypass via several AJAX actions in versions up to, and including 2.3.0 due to missing capability checks and missing nonce validation. This makes it possible for authenticated attacke...

6.5CVSS6.6AI score0.00534EPSS
Exploits0References4
CVE
CVE
added 2022/11/03 4:29 p.m.58 views

CVE-2022-2696

The CVE affects the WordPress plugin The Restaurant Menu – Food Ordering System – Table Reservation (versions up to 2.3.0). Root cause: missing capability checks and missing nonce validation in multiple AJAX actions, enabling authorization bypass. Impact: authenticated attackers with minimal priv...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2022/11/03 12:0 a.m.7 views

WordPress plugin Restaurant Menu – Food Ordering System – Table Reservation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Restaurant Menu - Food...

6.5CVSS6.5AI score0.00534EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/11/03 12:0 a.m.8 views

WordPress plugin Restaurant Menu – Food Ordering System – Table Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Restaurant Menu - Food...

8.8CVSS7.7AI score0.00482EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/11/03 12:0 a.m.10 views

PT-2022-24056 · WordPress · The Restaurant Menu – Food Ordering System – Table Reservation

Name of the Vulnerable Software and Affected Versions: The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress versions up to, and including, 2.3.1 Description: The issue is due to missing or incorrect nonce validation on several functions called via AJAX actions, such...

8.8CVSS8.5AI score0.00482EPSS
Exploits0References5
Nuclei
Nuclei
added 2022/09/30 5:18 p.m.61 views

Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection

Sourcecodester Multi Restaurant Table Reservation System 1.0 contains a SQL injection vulnerability via the file view-chair-list.php. It does not perform input validation on the tableid parameter, which allows unauthenticated SQL injection. An attacker can send malicious input in the GET request ...

9.8CVSS10AI score0.06093EPSS
Exploits1References5
CNVD
CNVD
added 2022/07/25 12:0 a.m.47 views

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞(CNVD-2022-58181)

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

5.4CVSS2.8AI score0.00989EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/25 12:0 a.m.35 views

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞(CNVD-2022-58179)

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can use this vulnerability to conduct cross-site...

5.4CVSS2.7AI score0.00989EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/25 12:0 a.m.33 views

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞(CNVD-2022-58182)

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

5.4CVSS3.1AI score0.00989EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/25 12:0 a.m.26 views

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞(CNVD-2022-58180)

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

5.4CVSS2.8AI score0.00989EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/25 12:0 a.m.55 views

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞(CNVD-2022-58178)

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. sourceCodester Multi Restaurant Table Reservation System version 1.0 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

5.4CVSS3.7AI score0.00989EPSS
Exploits1References1
NVD
NVD
added 2022/07/15 12:15 p.m.24 views

CVE-2020-36552

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made field to /dashboard/menu-list.php...

5.4CVSS0.00989EPSS
Exploits1References4
NVD
NVD
added 2022/07/15 12:15 p.m.25 views

CVE-2020-36550

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table Name field to /dashboard/table-list.php...

5.4CVSS0.00989EPSS
Exploits1References4
NVD
NVD
added 2022/07/15 12:15 p.m.19 views

CVE-2020-35261

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php...

5.4CVSS0.00989EPSS
Exploits1References4
OSV
OSV
added 2022/07/15 12:15 p.m.4 views

CVE-2020-36553

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Areafoodtype field to /dashboard/menu-list.php...

5.4CVSS6.1AI score0.00989EPSS
Exploits1References4
NVD
NVD
added 2022/07/15 12:15 p.m.24 views

CVE-2020-36553

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Areafoodtype field to /dashboard/menu-list.php...

5.4CVSS0.00989EPSS
Exploits1References4
Rows per page
Query Builder