CVE-2024-44313

8.1 highEPSS 0.7%

High (8.1) in tastyigniter tastyigniter. EPSS 0.7% chance of exploitation in the next 30 days.

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tastyigniter:tastyigniter

References

https://github.com/tastyigniter/TastyIgniter/blob/3.x/app/admin/controllers/Orders.php
https://medium.com/@cnetsec/cve-2024-44313-incorrect-access-control-in-tastyigniter-3-7-6-01a73c548b74

Check your stack JSON