Reflected Cross-Site Scripting (XSS) Vulnerability in Restaurant Reservations Widget
CVE-2024-48023
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 17 October 2024
What is CVE-2024-48023?
A Cross-site Scripting (XSS) vulnerability exists in the Restaurant Reservations Widget developed by RestaurantConnect, Inc. This flaw allows malicious actors to inject scripts into web pages viewed by users. When users interact with the compromised widget, they may unwittingly execute malicious scripts that can hijack session cookies or redirect them to phishing sites. The vulnerability primarily affects versions from n/a through 1.0, indicating that any installations of the widget in these versions are susceptible to this security weakness. Proper input validation measures are crucial to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Restaurant Reservations Widget <= 1.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved