CVE-2021-38699

The repository provides functional proof-of-concept exploit code for CVE-2021-38699, demonstrating multiple reflected XSS vulnerabilities in TastyIgniter v3.0.7. It includes detailed HTTP request examples targeting the admin dashboard, media manager, and location search parameters.

The repository describes a stored XSS vulnerability in TastyIgniter v3.0.7, detailing vulnerable pages and payloads. It lacks exploit code but provides technical specifics about the vulnerability.

This repository documents a stored XSS vulnerability in TastyIgniter v3.0.7, where malicious payloads executed elsewhere in the application are logged and re-triggered when viewing the System Logs section. The PoC involves exploiting a reflected XSS first, then observing the stored execution in logs.