Stored Cross-Site Scripting in Quick Restaurant Menu Plugin for WordPress

CVE-2023-0553

What is CVE-2023-0553?

The Quick Restaurant Menu plugin for WordPress allows authenticated attackers with administrator-level permissions to exploit a stored cross-site scripting vulnerability. The lack of proper input sanitization and output escaping in the plugin's settings parameters enables attackers to inject arbitrary web scripts. These scripts execute when a user accesses the compromised pages, potentially leading to unauthorized actions or data exposure.

References