Vulnerabilities

TI-2024-24738 CVE-2024-37223 · GHSA-g849-58hg-8cmw

WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-07-22 No fix listed CWE-79

TI-2024-01289 CVE-2024-1382 · GHSA-hfqc-4v3r-3625

Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion

MEDIUM 42

The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the nd_rst_layout attribute of the nd_rst_search shortcode.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0088 Published 2024-03-07 No fix listed CWE-98

Vulnerabilities

Filters

WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion