Tastyigniter Tastyigniter
7 CVEs affecting Tastyigniter Tastyigniter. Latest disclosed: 2025-10-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-61417 | High | 8.8 | 2025-10-20 | Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file… |
CVE-2024-44313 | High | 8.1 | 2025-03-18 | TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and… |
CVE-2024-44314 | Medium | 6.5 | 2025-03-18 | TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. Th… |
CVE-2022-38256 | Medium | 5.4 | 2022-09-08 | TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2022-0602 | Medium | 5.4 | 2022-04-05 | Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0. |
CVE-2022-23378 | Medium | 5.4 | 2022-02-09 | A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/… |
CVE-2021-38699 | Medium | 5.4 | 2021-08-15 | TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs. |