CVE-2021-24299

The CVE-2021-24299 entry concerns the ReDi Restaurant Reservation WordPress plugin (versions before 21.0426). An unauthenticated user can submit a reservation with a crafted Comment field that is not properly validated, enabling stored XSS. The payload is later executed when the plugin loads the ...