https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:49:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-36523 cnvd-2021-36523 https://cve.radiocsirt.org/vuln/cnvd-2021-36523 https://cve.radiocsirt.org/vuln/euvd-2026-23704 EUVD-2026-23704 https://cve.radiocsirt.org/vuln/euvd-2026-23704 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24299 <p>The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an &#39;Upcoming&#39; page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called &#39;Comment&#39; does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the &#39;Upcoming&#39; page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.</p> <p>The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an &#39;Upcoming&#39; page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called &#39;Comment&#39; does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the &#39;Upcoming&#39; page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24299 https://cve.radiocsirt.org/vuln/ghsa-7v76-9gr6-p8jh <p>The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an &#39;Upcoming&#39; page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called &#39;Comment&#39; does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the &#39;Upcoming&#39; page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.</p> <p>The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an &#39;Upcoming&#39; page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called &#39;Comment&#39; does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the &#39;Upcoming&#39; page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.</p> https://cve.radiocsirt.org/vuln/ghsa-7v76-9gr6-p8jh https://cve.radiocsirt.org/vuln/gsd-2021-24299 gsd-2021-24299 https://cve.radiocsirt.org/vuln/gsd-2021-24299