Iresturant Project Iresturant — known CVE vulnerabilities

Every CVE whose affected-product data names Iresturant Project Iresturant, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-43439 — CVSS 9.8 (critical): RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely
• CVE-2021-45802 — CVSS 9.8 (critical): MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added…
• CVE-2021-45803 — CVSS 8.8 (high): MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL…
• CVE-2021-43436 — CVSS 5.4 (medium): MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an…
• CVE-2021-43438 — CVSS 5.4 (medium): Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field