Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerability in ReDi Restaurant Reservation
CVE-2024-31299

7.1HIGH

Key Information:

Vendor
WordPress
Status
Redi Restaurant Reservation
Vendor
CVE Published:
10 April 2024

Summary

The ReDi Restaurant Reservation plugin is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to Cross-Site Scripting (XSS) attacks. This issue enables potential attackers to perform unauthorized actions on behalf of users without their consent or knowledge. The vulnerability specifically impacts versions of the plugin from n/a up to 24.0128, emphasizing the need for timely updates to mitigate risks associated with this security flaw.

Affected Version(s)

ReDi Restaurant Reservation <= 24.0128

References

https://patchstack.com/database/vulnerability/redi-restau...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Majed Refaea (Patchstack Alliance)
.