Cross-site Scripting (XSS) Vulnerability Affects ReDi Restaurant Reservation

CVE-2024-29806

What is CVE-2024-29806?

The vulnerability presents an improper neutralization of input during web page generation, specifically a reflected cross-site scripting (XSS) issue that affects the ReDi Restaurant Reservation plugin. This flaw allows an attacker to execute arbitrary scripts in the context of another user's session by injecting malicious code through input fields that have not been properly sanitized. It is crucial for users of this plugin to be aware of this vulnerability as it may lead to unauthorized data access and compromise the integrity of the application.

References