CNNVD-202512-143 Information
Dec 01, 2025
cve
CNNVD ID
CNNVD-202512-143
Related CVE
- CNNVD Published: 2025-12-01
Description (Chinese)
RestaurantWebsite是Idriss JAIRI个人开发者的一个在线食品订购和餐桌预订系统。 RestaurantWebsite存在代码注入漏洞，该漏洞源于组件Make a Reservation中参数selected_date的错误操作，可能导致跨站脚本。
Description (English)
RestaurantWebsite is an online food order and table reservation system for Idriss JAIRI personal developers. RestaurantWebsite has a code-infusion loophole, which results from the wrong operation of the parameter spelted date in the component Make a Renewal, which may result in a cross-site script.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-12-01
Last Modified
2026-02-24
References
https://vuldb.com/?id.333812 https://github.com/dream357/report/blob/main/restaurant-website-report.docx https://vuldb.com/?submit.691839 https://vuldb.com/?ctiid.333812 https://access.redhat.com/security/cve/cve-2025-13802
Share on: