Cross site scripting

2022-01-1217:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.

CPENameOperatorVersion
iresturanteq1.0

CPE	Name	Operator	Version
	iresturant	eq	1.0

References

github.com/MartDevelopers-Inc/iResturant

medium.com/@mayhem7999/cve-2021-43436-56dc43aeac81