1124 matches found
CVE-2025-62418 bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)
Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...
CVE-2025-62418 bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)
Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...
EUVD-2025-34810
bagisto has Cross Site Scripting XSS issue in TinyMCE Image Upload HTML...
GHSA-67PX-R26W-598X bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. Details The application...
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. Details The application...
PT-2025-42537
Name of the Vulnerable Software and Affected Versions Bagisto versions prior to 2.3.8 Bagisto version 2.3.7 Description The TinyMCE image upload functionality allows an attacker with sufficient privileges to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code...
CVE-2025-62415: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...
CVE-2025-62418: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...
Webkul Software Bagisto 安全漏洞
Webkul Software Bagisto is an open source e-commerce framework from the Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto version 2.3.7, which stems from the TinyMCE image upload feature that allows the upload of specially crafted HTML files, which could...
Webkul Software Bagisto 安全漏洞
Webkul Software Bagisto is an open source e-commerce framework from the Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto version 2.3.7, which stems from the TinyMCE image upload feature that allows the upload of specially crafted SVG files, which could le...
PT-2025-42534
Name of the Vulnerable Software and Affected Versions Bagisto versions prior to 2.3.8 Description The TinyMCE image upload functionality in Bagisto allows an attacker with sufficient privileges to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes ...
EUVD-2021-24268
Malware in sbrugna...
EUVD-2014-3782
Malware in sbrugna...
EUVD-2011-5047
Malware in sbrugna...
EUVD-2006-0310
Malware in sbrugna...
EUVD-2014-3781
Malware in sbrugna...
EUVD-2005-4594
Malware in sbrugna...
EUVD-2009-2039
Malware in sbrugna...