CVE-2022-23378

2022-02-0913:15:08

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The “items%5B0%5D%5Bpath%5D” parameter of a request made to /admin/allergens/edit/1 is vulnerable.

CPENameOperatorVersion
tastyignitereq3.0.4-beta.26
tastyignitereq3.2.1
tastyignitereq2.1.0
tastyignitereq3.0.4-beta.7
tastyignitereq3.0.4-beta.3
tastyignitereq3.0.4-beta.16
tastyignitereq3.0.4-beta.24.4
tastyignitereq3.0.4-beta.24.1
tastyignitereq2.1.1
tastyignitereq1.3-beta

Name	Operator	Version
tastyigniter	eq	3.0.4-beta.26
tastyigniter	eq	3.2.1
tastyigniter	eq	2.1.0
tastyigniter	eq	3.0.4-beta.7
tastyigniter	eq	3.0.4-beta.3
tastyigniter	eq	3.0.4-beta.16
tastyigniter	eq	3.0.4-beta.24.4
tastyigniter	eq	3.0.4-beta.24.1
tastyigniter	eq	2.1.1
tastyigniter	eq	1.3-beta