CVE-2026-92412 — Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

CVE-2026-92412

Five Star Restaurant Reviews < 2.3.14 - Reflected XSS PUBLISHED

Description (CNA)

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.

Affected (CNA)

Vendor / product	Versions
Unknown / Five Star Restaurant Reviews	affected 0 before 2.3.14

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/90713b84-9c19-46fe-a4ef-89cb9f66ce68/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.