CVE-2026-92412
Five Star Restaurant Reviews < 2.3.14 - Reflected XSS
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.
| Vendor | unknown |
| Product | five star restaurant reviews |
| Published | Oct 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown five star restaurant reviews
Be the first to know when new unknown vulnerabilities affecting unknown five star restaurant reviews are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Five Star Restaurant Reviews
0 < 2.3.14
References
Credits
V1T WPScan