CVE-2024-44313
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices…
Published: 2025-03-18 · CVSS: 8.1 · CVSS 3.1
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7