Medium (6.1) in ketchup restaurant reservations project ketchup restaurant reservations. EPSS 84% chance of exploitation in the next 30 days.
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made
Severity
CVSS 3.1
6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
84% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)