CVE-2022-2753

PoC —

CVSS 3.1

6.1 medium

EPSS

83%p100

Published

Sep 19, 2022 (Sep 19, 2022)

Modified

Jun 17, 2026

Description

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made

Vendors: ketchup restaurant reservations project
Products: ketchup restaurant reservations
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (83.4%)

In the news0 stories

No ingested article mentions this CVE yet.