Iresturant

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-43439 CRITICAL Act Now

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Iresturant

NVD GitHub

CVSS 3.1

9.8

EPSS

3.4%

CVE-2021-43438 MEDIUM This Month

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE XSS Iresturant

NVD GitHub

CVSS 3.1

5.4

EPSS

0.7%

CVE-2021-43439

EPSS 3% CVSS 9.8

CRITICAL Act Now

XSS Iresturant

NVD GitHub

CVE-2021-43438

EPSS 1% CVSS 5.4

MEDIUM This Month

RCE XSS Iresturant

NVD GitHub