Food Ordering System Vulnerable to Reflected Cross-Site Scripting

CVE-2024-9653

What is CVE-2024-9653?

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is prone to a reflected cross-site scripting vulnerability. This issue arises from insufficient input sanitization and output escaping for the 'action' parameter. Attackers can exploit this vulnerability to inject arbitrary web scripts into web pages. If users are tricked into clicking on a compromised link, the injected scripts can execute within their browsers, potentially leading to unauthorized access or data exposure. To mitigate risks, it is crucial for users to apply the latest security patches and validate their plugin versions.

References