Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-61417
8.8
HIGHCVSS v3
Published
October 20, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.
tastyigniter/TastyIgniter
GitHub:fire: Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants
GitHub:fire: Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants= 3.7.7, <= 3.7.7NVD