CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Piarulli My Restaurant Menu my-restaurant-menu allows Stored XSS.This issue affects My Restaurant Menu: from n/a through <= 0.2.0.
Explanation of Vulnerability in Simple Terms
My Restaurant Menu versions 0.2.0 and earlier contain a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts. An authenticated user must visit a crafted page for the attack to succeed. The vulnerability can affect other users and compromise site integrity. Update to a version newer than 0.2.0 to remediate.
What an attacker can do
Inject malicious scripts that execute in other users' browsers and modify site content.
Potential impact on your site
Attackers can steal user sessions, deface content, or redirect visitors to malicious sites.
Conditions required to exploit
Attacker needs a low-privilege account and must trick a user into visiting a malicious link.
Key dates
External resources
Related vulnerabilities
