Design/Logic Flaw

2021-12-2020:15:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form

CPENameOperatorVersion
iordereq1.0

CPE	Name	Operator	Version
	iorder	eq	1.0

References

github.com/MartDevelopers-Inc/Order_Processing_MIS

medium.com/@mayhem7999/cve-2021-43441-2fcc857cb6bb