CVE-2021-38699

Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS

CVE-2021-38699: Stored XSS in TastyIgniter v307 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v307 Restaurtant CMS System Logs section of the web application cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2021-38699 POC Execute reflective cross site scripting elsewhere in the web app (see githubcom/HuskyHacks/CVE-2021

Hi! I'm Matt, aka HuskyHacks 👋 Mission Things that I love: 📕 Teaching 🖥️ Hacking 📕🖥️ Teaching Hacking 😸 My cats, Cosmo and Kiki 📒 Learning stuff 🌎 Publishing open source 🦇 The Dracula Theme Where I've Been ⚔️ USMC (Intel, IT Admin) 🧪 MIT Lincoln Laboratory (Lead Cybersecurity Analyst, Space Systems and Technology Resea

Multiple Reflected XSS in TastyIgniter v3.0.7 Restaurtant CMS

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v307 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version 307 cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2021-38699 POC: Admin dashboard start param: POST cvefarmlocal/admin/dashboard HTTP/11 User-Agent: Mozilla/50 (X11; Linux x86_64; rv:780) Gecko/201001

TastyIgniter 3.0.7 allows XSS via the name field during user-account creation

CVE-2021-38699 TastyIgniter 307 allows XSS via the name field during user-account creation A Stored Cross Site Scripting Vulnerability exists in multiple pages of TastyIgniter v307 that allows for arbitrary execution of JavaScript cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2021-38699 Vulnerable Pages: /account, /reservation, /admin/dashboard, /admin/system_logs Vu