CVE-2021-43441

5.3 mediumEPSS 1.3%

Medium (5.3) in iorder project iorder. EPSS 1.3% chance of exploitation in the next 30 days.

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form

Severity

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19