CVE-2022-0421 in Five Star Restaurant Reservations Plugin
Сводка (Английский)
The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping, attackers could perform Cross-Site Scripting attacks against a logged in admin viewing the failed payments
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Резервировать
31.01.2022
Раскрытие
21.11.2022
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 214063 | Five Star Restaurant Reservations Plugin эскалация привилегий | 862 | Не определено | Официальное исправление | CVE-2022-0421 |