TheGetch/CVE-2022-23378

TheGetch/CVE-2022-23378

GitHubGitHub
GitHubgithub.com
Releases0
Authenticated reflected XSS in TastyIgniter version v3.2.2.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-23378↗
5.4 MEDIUM3.5 LOW

A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.