CVE-2025-11496

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations – WordPress Booking Plugin versions prior to 2.7.6

Description The Five Star Restaurant Reservations – WordPress Booking Plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping of the rtb-name parameter. This allows unauthenticated attackers to inject malicious web scripts into pages, which will then execute when a user accesses those pages.

Recommendations Update Five Star Restaurant Reservations – WordPress Booking Plugin to version 2.7.6 or later.