Good Reviews Wp Vulnerabilities & Security Issues

Good Reviews Wp Vulnerabilities

2 known security issues reported for the Good Reviews Wp WordPress plugin. Most recent disclosed Feb 5, 2024.

1 medium

Five Star Restaurant Reviews [good-reviews-wp] < 2.3.6

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5.

Affected:: up to 2.3.6
Fixed in:: 2.3.6
Disclosed:: Feb 5, 2024

CVE-2024-24838 on NVD →

Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL

medium

The Five Star Restaurant Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the review url parameter in versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,...

CVSS:: 6.4
Affected:: up to 2.3.5
Fixed in:: 2.3.6
Disclosed:: Feb 2, 2024

CVE-2024-24838 on NVD →

Five Star Restaurant Reviews [good-reviews-wp] < 2.3.6

Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL

Protect your WordPress site