CVE-2021-38699

CVE-2021-38699

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.0%
exploitation probability
8.0%top 5% of all CVEs
observed exploitation
nono source reports it
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.
Affected products
n/a · n/a
References
http://packetstormsecurity.com/files/163843/TastyIgniter-3.0.7-Cross-Site-Scripting.htmlhttps://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSShttps://github.com/HuskyHacks/CVE-2021-38699-Stored-XSShttps://github.com/Justin-1993/CVE-2021-38699https://pentesternotes.com/?p=209https://tastyigniter.com/support