medium6.1
CVE-2022-2753
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated a…
Impact
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ketchup Restaurant Reservations Project | Ketchup Restaurant Reservations | through 1.0.0 |