CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2022-2753 – Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS
https://notcve.org/view.php?id=CVE-2022-2753
06 Sep 2022 — The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made El plugin Ketchup Restaurant Reservations de WordPress versiones hasta 1.0.0, no comprueba y escapa de algunas de las entradas del usuario de la reserva, permitiendo a atacantes no autenticados llevar a cabo ataques de tipo Cross-Site Scripting al e... • https://wpscan.com/vulnerability/3c6cc46e-e18a-4f34-ac09-f30ca74a1182 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-2754 – Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
https://notcve.org/view.php?id=CVE-2022-2754
06 Sep 2022 — The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks El plugin Ketchup Restaurant Reservations de WordPress versiones hasta 1.0.0, no comprueba ni escapa de algunos parámetros de reserva antes de usarlos en sentencias SQL, lo que podría permitir a atacantes no autenticados llevar a cabo ataques de inyección SQL The Ketchup Re... • https://wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •