Description

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

INFO

Published Date :

2025-03-18T00:00:00.000Z

Last Modified :

2025-03-18T14:17:59.011Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-44313 vulnerability.

No data.

REFERENCES

CVSS Vulnerability Scoring System