{"uuid": "d90eacb6-0080-4f13-920f-051a65f7b1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24299", "type": "seen", "source": "https://t.me/hacking_Attack/9959", "content": "Exploit Collector\nWordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nWordPress ReDi Restaurant Reservation plugin version 21.0307 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 97371d46e078284e75d608dc3d9438a0\n\nDownload\n# Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)\n# Date: 2021-05-10\n# Exploit Author: Bastijn Ouwendijk\n# Vendor Homepage: https://reservationdiary.eu/\n# Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/\n# Version: 21.0307 and earlier\n# Tested on: Windows 10\n# CVE : CVE-2021-24299\n# Proof: https://bastijnouwendijk.com/cve-2021-24299/\n\nSteps to exploit this vulnerability:\n\n1. Go to the page where [redirestaurant] is embed to make a restaurant reservation by filling in the requested information\n2. In the 'Comment' field of the restaurant reservation form put the payload: ``\n3. Submit the form\n4. While being logged into WordPress as administrator go to ReDi Reservations > Upcoming (Tablet PC)\n5. Click on 'View upcoming reservations'\n6. Select for 'Show reservations for': 'This week'\n7. The reservations are loaded and two alerts are shown with text 'XSS'\n\nSource:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796", "creation_timestamp": "2026-09-01T20:02:41.294745Z"}