An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://github.com/MartDevelopers-Inc/Order_Processing_MIS | third party advisory |
https://medium.com/%40mayhem7999/cve-2021-43441-2fcc857cb6bb |