CVE-2021-43438

5.4 mediumEPSS 0.7%

Medium (5.4) in iresturant project iresturant. EPSS 0.7% chance of exploitation in the next 30 days.

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19