{"id":"CVE-2026-103305","published":"2026-10-11T07:17:21.007","lastModified":"2026-10-13T20:36:00.850","description":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/9fde6498-7d23-4419-9416-d5f50ca97c4a/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Prenotazioni WordPress plugin allows unauthenticated users to save settings without proper authorization or CSRF protection, leading to stored XSS vulnerabilities that can affect both administrators and visitors. This creates a high-risk vector for executing malicious scripts in the context of privileged users.","exploitability":"Exploitation is relatively straightforward as it requires no authentication and only needs a user to visit a crafted page with the malicious payload, though it may require social engineering to get administrators to interact with the compromised site.","blast_radius":"The impact could be significant as attackers can execute arbitrary JavaScript in the context of admin sessions, potentially leading to full account takeover, data exfiltration, or modification of critical site settings and content.","remediation":"Upgrade to version 1.7.6 or later which includes proper authorization checks and CSRF protection for settings saving functionality.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","wordpress","plugin","stored-xss"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:53:38.944Z"}}