CVE-2026-92412

{
  "etk_id": "ETK-2026-528",
  "cve_id": "CVE-2026-92412",
  "display_id": "CVE-2026-92412",
  "ghsa_id": "GHSA-4q7f-288v-8f48",
  "euvd_id": "EUVD-2026-90517",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Cross-site scripting in Five Star Restaurant Reviews",
  "summary": "Five Star Restaurant Reviews for WordPress versions earlier than 2.3.14 do not safely encode a user-controlled value when rendering HTML. An unauthenticated attacker may cause script to run in a target user's browser if that user is induced to submit a malicious request; logged-in administrators may be affected.",
  "mitigation": "Update the Five Star Restaurant Reviews WordPress plugin to version 2.3.14 or later. Until updated, reduce exposure by limiting access to the affected site and cautioning users against following untrusted requests or links.",
  "vendor": null,
  "product": "Five Star Restaurant Reviews",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 2.3.14"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "2.3.14"
      ],
      "package_name": "Five Star Restaurant Reviews",
      "purl": null
    }
  ],
  "cwes": [
    79
  ],
  "cvss_score": 7.1,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
  "epss_score": 0.0016,
  "epss_percentile": 0.0528,
  "epss_asof": "2026-10-21",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 34.14850811666667,
  "t0_at": "2026-10-01T06:00:25.466000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-04T04:33:34.726915+00:00",
      "days": 2.939690519849537,
      "is_lower_bound": false,
      "measured_at": "2026-10-01T06:00:25.466000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-01T06:00:25.466000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-01T06:00:25.466000+00:00",
      "url": "https://github.com/advisories/GHSA-4q7f-288v-8f48"
    }
  }
}