HIGH 7.1 NVD

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing u

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.

References

https://wpscan.com/vulnerability/90713b84-9c19-46fe-a4ef-89cb9f66ce68/

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-01

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-10-01 via NVD.

vulnfeed aggregates 12641 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.