Skip to content
OpenAdvisories

Package · Packagist

tastyigniter/tastyigniter

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-61417

    TastyIgniter vulnerable to Cross-Site Scripting

    Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their brow…

    tastyigniter/tastyigniter Packagist
  • High 8.1
    CVE-2024-44313 Public exploit

    TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

    TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

    tastyigniter/tastyigniter Packagist
  • High 7.4
    CVE-2022-0602

    Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter

    Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.

    tastyigniter tastyigniter/tastyigniter tastyigniter/tastyigniter Packagist