PT-2022-9535 · WordPress · Five Star Restaurant Reservations

Krzysztof Zając · Published 2022-01-24 · Updated 2022-01-28 · CVE-2021-24965

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations WordPress plugin versions prior to 2.4.8

Description The issue concerns a lack of capability and CSRF checks in the rtb welcome set schedule AJAX action. This allows any authenticated users to call the action, and due to insufficient sanitisation and escaping, users with a role as low as subscriber can perform Cross-Site Scripting attacks against logged-in admins.

Recommendations For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the rtb welcome set schedule AJAX action to prevent exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24965

Affected Products

Five Star Restaurant Reservations

References · 4

• 🔥 https://wpscan.com/vulnerability/306ecf09-fdf0-449c-930c-9dfa58f0efc2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24965 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24965 · Vendor Advisory
• https://t.me/cibsecurity/36116 · Telegram Post