CVE-2024-33596

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in Five Star Plugins Five Star Restaurant Reservations.This issue affects Five Star Restaurant Reservations: from n/a through 2.6.16.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Five Star Plugins	Five Star Restaurant Reservations	<= 2.6.16
fivestarplugins	five_star_restaurant_reservations	<= 2.6.16

References

Timeline

Published: Apr 29, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-335977.5Missing Authorization vulnerability in ProFaceOff SSU.This issue affects SSU: from n/a through 1.5.0.CVE-2024-335985.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twinpictures Annual Archive allows Sto CVE-2024-335998.1nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client reque CVE-2024-33609.8A vulnerability, which was classified as critical, was found in SourceCodester Online Library System 1.0. Affected is an unknown function of CVE-2024-336005.9nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup respon CVE-2024-336017.3nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc o CVE-2024-336027.4nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory w CVE-2024-336035.3The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to acces CVE-2024-336046.1A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker t CVE-2024-336057.5Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerabilit CVE-2024-336068.8An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a Mi CVE-2024-336075.6Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enab