WordPress Plugin Vulnerabilities

Quick Restaurant Reservations < 1.4.2 - Reflected Cross-Site Scripting

Description

The plugin does not escape some parameters before outputting them back in admin pages, leading to Reflected Cross-Site Scripting

Affects Plugins

Plugin icon
quick-restaurant-reservations
Fixed in 1.4.2

References

CVE
CVE-2022-29923

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
BEE-K
Verified
Yes
WPVDB ID
f3818238-e802-4b03-856e-99752f409c3a

Timeline

Publicly Published
2022-05-12 (about 4 years ago)
Added
2022-07-25 (about 3 years ago)
Last Updated
2023-04-21 (about 3 years ago)

Other

Published
Title
Published
2025-09-10
Title
eID Easy < 4.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Published
2026-01-27
Title
Simple Folio < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields
Published
2015-08-22
Title
MDC Private Message <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2022-11-30
Title
Eventify <= 2.1 - Admin+ Stored XSS
Published
2026-01-16
Title
Quote Master <= 7.1.1 - Reflected Cross-Site Scripting