Skip to content
OpenAdvisories

Vendor

tastyigniter

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2

    TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

    TastyIgniter through 4.4.5 contains a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized…

  • High 7.4

    Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter

    Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.