CVE-2021-43441

CVE-2021-43441 affects iOrder 1.0 with an HTML Injection vulnerability in the signup form. Public references consistently describe an HTML injection that could allow an attacker to render arbitrary HTML when a user submits the signup form. CVSS metrics (NVD) show a base score around 5.3 (3.1) wit...

CVE-2021-43440

CVE-2021-43440 affects iOrder 1.0. The vulnerability is multiple stored XSS flaws in the signup form (Name and Phone fields) that could allow remote attackers to execute arbitrary code. The NVD entry confirms a stored XSS issue with a baseline impact of partial integrity loss and no confidentiali...