Good Reviews Wp Vulnerabilities

The Five Star Restaurant Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.3.13. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu...

CVSS:

6.1

(Wordfence)

Affected:

up to 2.3.13

Fixed in:

2.3.14

Disclosed:

Sep 29, 2026

CVE-2026-92412 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5.

Affected:

up to 2.3.6

Fixed in:

2.3.6

Disclosed:

Feb 5, 2024

CVE-2024-24838 on NVD →

The Five Star Restaurant Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the review url parameter in versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,...

CVSS:

6.4

(Wordfence)

Affected:

up to 2.3.5

Fixed in:

2.3.6

Disclosed:

Feb 2, 2024

CVE-2024-24838 on NVD →