{"vulnerability": "cve-2021-38699", "sightings": [{"uuid": "148fcd83-d371-4531-8df4-4c97e3fc51c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38699", "type": "seen", "source": "https://t.me/hacking_Attack/20423", "content": "Exploit Collector\nTastyIgniter 3.0.7 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png \nTastyIgniter version 3.0.7 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 60b4b39b8239a5951ee136da0b3b1117\n\nDownload\n# Exploit Title: XSS-Stored on TastyIgniter 3.0.7 Vulnerable parameter\nCustomer[first_name] on /customers/create\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 08.13.2021\n# Vendor: https://tastyigniter.com/\n# Link:https://tastyigniter.com/download\n# CVE: CVE-2021-38699\n\n[+] Exploit Source:\n\n# Vulnerability Assessment\nXSS-Stored Allow 48 characters\n\n# Url\nhttp://192.168.1.3/setup-master/admin/customers/create\n\n# Payload\n# Vulnerable parameter\nCustomer[first_name]\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38699\n# Proof: https://streamable.com/i6lzfc\n# BR nu11secur1ty\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http:\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:28.311978Z"}, {"uuid": "4e1cc122-2f00-4b65-9918-929f86296faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38699", "type": "seen", "source": "https://t.me/hacking_Attack/20423", "content": "Exploit Collector\nTastyIgniter 3.0.7 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png \nTastyIgniter version 3.0.7 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 60b4b39b8239a5951ee136da0b3b1117\n\nDownload\n# Exploit Title: XSS-Stored on TastyIgniter 3.0.7 Vulnerable parameter\nCustomer[first_name] on /customers/create\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 08.13.2021\n# Vendor: https://tastyigniter.com/\n# Link:https://tastyigniter.com/download\n# CVE: CVE-2021-38699\n\n[+] Exploit Source:\n\n# Vulnerability Assessment\nXSS-Stored Allow 48 characters\n\n# Url\nhttp://192.168.1.3/setup-master/admin/customers/create\n\n# Payload\n# Vulnerable parameter\nCustomer[first_name]\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38699\n# Proof: https://streamable.com/i6lzfc\n# BR nu11secur1ty\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http:\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:01.630203Z"}]}