https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T23:48:46.506077+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-92412 fkie_cve-2026-92412 2026-10-01T23:48:46.508383+00:00

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.

 https://vulnerability.circl.lu/vuln/ghsa-4q7f-288v-8f48 GHSA-4q7f-288v-8f48 2026-10-01T23:48:46.508593+00:00

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.