CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup food-store allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through <= 1.5.4.
Explanation of Vulnerability in Simple Terms
Food Store – Online Food Delivery & Pickup versions 1.5.4 and earlier contain a cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts that execute in a victim's browser when they visit a crafted link or page. The vulnerability affects confidentiality, integrity, and availability across the application scope. Update to a version newer than 1.5.4.
What an attacker can do
Inject malicious scripts that run in visitors' browsers, stealing data or modifying page content.
Potential impact on your site
Customers' session data, login credentials, or personal information could be stolen; site reputation damaged.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
