Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-2754

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

CVSS 3.1 · 9.8 Critical EPSS 39.6% KEV · Not listed
Vendors
Ketchup Restaurant Reservations Project
Products
Ketchup Restaurant Reservations
CVE-2022-2753

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made

CVSS 3.1 · 6.1 Medium EPSS 84.5% KEV · Not listed
Vendors
Ketchup Restaurant Reservations Project
Products
Ketchup Restaurant Reservations