Alex Reservations: Smart Restaurant Booking vulnerabilities
1 known vulnerability in Alex Reservations: Smart Restaurant Booking from Alexreservations. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
Alex Reservations: Smart Restaurant Booking: Unrestricted Upload of File with Dangerous Type
The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it pos