← Database

CVE-2024-44313

HIGH CVSS: 8.1 Published: 2025-03-18 Modified: 2026-06-17

Description

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

Affected Platforms

Tastyigniter Tastyigniter

Weakness Type

CWE-284

References