CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:iresturant_project:iresturant:1.0:*:*:*:*:*:*:*

Information

Published : 2022-01-12 09:15

Updated : 2022-01-19 10:44


NVD link : CVE-2021-43436

Mitre link : CVE-2021-43436


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

iresturant_project

  • iresturant