Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Ketchup Restaurant Reservations Project Clear all filters
TI-2022-02552 CVE-2022-2754 · GHSA-6m9q-ppfx-8654

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

Priority HIGH 69

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39065 Published 2022-09-19 No fix listed CWE-89
TI-2022-02551 CVE-2022-2753 · GHSA-v5rq-cjqq-8jg9

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS

Priority HIGH 68

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in ad…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.83718 Published 2022-09-19 No fix listed CWE-79