CVE-2025-61417

Published October 20th, 2025

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.

tastyigniter/TastyIgniter

:fire: Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants

GitHub

3.61K

mg7-x/CVEs

Welcome to the CVE disclosures section of this repository! Here, you'll find a list of potential security vulnerabilities that I have discovered and responsibly disclosed.

GitHub