One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 4024849 |
| Date de publication | 2022-01-24 08:15:08 (vue: 2022-01-24 12:06:27) |
| Titre | CVE-2021-24965 |
| Texte | The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtb_welcome_set_schedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform Cross-Site Scripting attacks against logged in admins |
| Envoyé | Oui |
| Condensat | 2021 24965 action admins against ajax allowing any attacks authenticated before call capability checks could cross csrf cve does due escaping five have lack logged low not perform plugin reservations restaurant role rtb sanitisation schedule scripting set site star subscriber users welcome wordpress |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.