TA
Vendor
tastyigniter
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29001 New | TA TastyIgniter tastyigniter | 7.2 | Oct 21 | TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization |
| CVE-2025-61417 | TA Tastyigniter Tastyigniter | 8.8 | Oct 20 | Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component |
| CVE-2024-44314 | TA Tastyigniter Tastyigniter | 6.5 | Mar 18 | TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses |
| CVE-2024-44313 | TA Tastyigniter Tastyigniter | 8.1 | Mar 18 | TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices… |
| CVE-2022-38256 | TA Tastyigniter Tastyigniter | 5.4 | Sep 8 | TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload |
| CVE-2022-0602 | TA Tastyigniter Tastyigniter | 5.4 | Apr 5 | Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0 |
| CVE-2022-23378 | TA Tastyigniter Tastyigniter | 5.4 | Feb 9 | A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter |
| CVE-2021-38699 | TA Tastyigniter Tastyigniter | 5.4 | Aug 15 | TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs |