← Back

Iorder

iorder

Vendor: Iorder Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-43441
1Iorder Project
1Iorder
Jun 17, 2026
Dec 20, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form
CVE-2021-43440
1Iorder Project
1Iorder
Jun 17, 2026
Dec 20, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field.