CVE-2024-9458

MEDIUM

Reservit Hotel < 3.0 - Admin+ Stored XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-9458 has a selected CVSS score of 4.8 (medium); EIP currently links 1 catalogued exploit.

Description

The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 7, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Reservit Hotel

Default status: unaffected

CVE ListBefore 3.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBReservit Hotel 2.1 - Stored Cross-Site Scripting (XSS)ExploitDB exploitby Ilteris Kaan PehlivanNot analyzed1 file
ExploitDB
PoC details

References

2