Input validation vulnerability in WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce 2.2.24

The WPCafe plugin for WordPress, which helps with online food ordering, restaurant menus, delivery, and reservations, has a security issue. This problem, known as Stored Cross-Site Scripting, can be exploited through the plugin’s Reservation Form feature. This is because the plugin does not properly clean or filter user input, which allows attackers with contributor-level access or higher to insert harmful website code into pages. This can potentially harm users who visit those pages.