Unrated severityNVD Advisory· Published Oct 1, 2026

CVE-2026-92412

Description

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request, including a logged-in administrator.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Five Star Restaurant Reviewsllm-fuzzy
Range: <2.3.14

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/90713b84-9c19-46fe-a4ef-89cb9f66ce68/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000