CVE-2022-23378

Name of the Vulnerable Software and Affected Versions TastyIgniter version 3.2.2

Description A Cross-Site Scripting (XSS) issue exists. The items%5B0%5D%5Bpath%5D parameter of a request made to "/admin/allergens/edit/1" is vulnerable.

Recommendations For version 3.2.2, as a temporary workaround, consider restricting access to the "/admin/allergens/edit/1" endpoint until a patch is available. Avoid using the items%5B0%5D%5Bpath%5D parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.