Bagisto Security Vulnerabilities

CVE-2023-36236

Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file...

CVE-2023-33570

Bagisto v1.5.1 is vulnerable to Server-Side Template Injection...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other...

CVE-2019-14933

Bagisto 0.1.5 allows CSRF under /admin...