Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerability in ReDi Restaurant Reservation

CVE-2024-31299

What is CVE-2024-31299?

The ReDi Restaurant Reservation plugin is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to Cross-Site Scripting (XSS) attacks. This issue enables potential attackers to perform unauthorized actions on behalf of users without their consent or knowledge. The vulnerability specifically impacts versions of the plugin from n/a up to 24.0128, emphasizing the need for timely updates to mitigate risks associated with this security flaw.

References