Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-71457
HistoryAug 17, 2021 - 12:00 a.m.

Tastylgniter Cross-Site Scripting Vulnerability

2021-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
tastyigniter
cross-site scripting
vulnerability
laravel php framework
user-submitted data
arbitrary javascript
cnvd

EPSS

0.01

Percentile

83.7%

TastyIgniter is a free and open source restaurant online ordering system based on the Laravel PHP Framework.A cross-site scripting vulnerability exists in Tastylgniter 3.0.7, which originates in the software’s /account, /reservation, /admin/dashboard, and / admin/system_logs directories lack valid validation of user-submitted data, which can be exploited to execute arbitrary JavaScript.

EPSS

0.01

Percentile

83.7%